Download Strongswan 4.2.10

Various protocols can be used to secure connections over public networks, such as the widely used ipsec. Strongswan is an ipsec implementation for Linux systems, the 4.2 wing of which focuses on the current 2.6 Linux kernel. Support for ikev1, ikev2 and ipv6 is present as on this page can be read. The developers have released Strongswan 4.2.10 with the following list of changes:

Version 4.2.10:

• Several performance improvements to handle thousands of tunnels with almost linear upscaling. All relevant data structures have been replaced by faster counterparts with better lookup times.
• Better parallelization to run charon on multiple cores. Due to improved resource locking and other optimizations the daemon can take full advantage of 16 or even more cores.
• The load-tester plugin can use a NULL Diffie-Hellman group and simulate unique identities and certificates by signing peer certificates using a CA on the fly.
• The redesigned stroke in-memory IP pool handles leases. The “ipsec leases” command queries assigned leases.
• Added support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg.
• The Padlock plugin supports the hardware RNG found on VIA CPUs to provide a reliable source of randomness.