FreeS/WAN IPSec for Linux, AOC-Ottawa 2002-01-24, RGB
Next Table of Contents

Interoperates fairly well:

  • Many heterogeneous-network users.
  • Fewer problems than expected with features that we deliberately don't support.
  • Rekeying strategy a problem: poorly specified, tricky.

    Performance good:

  • 100MHz Pentium (!) faster than T1.
  • Modern processors approach T3.
  • Need not compromise security for speed (e.g., we use 3DES not DES).
  • Fast LANs more problematic.

    Title Page

    Last modified by Richard Guy Briggs , Thu Jan 24 11:06:38 EST 2002 .