IPsec development for large scale deployments

on YouTube ↗42m

" summary

Covers deploying IPsec throughout modern infrastructure (virtualization, containers, multitenant systems) to provide secure, mobile connectivity at large scale. Describes Linux kernel IPsec features including XFRMi virtual interfaces, IPsec over TCP, hardware acceleration, cloned IPsec SAs, post-quantum support, and Opportunistic Encryption as approaches to encrypt dynamic networks.

AI-written summary · about

" chapters (11)

1. 0:00THE LIBRESWAN PROJECT
2. 1:04IPsec PRIMER
3. 2:03LINUX IPsec IMPLEMENTATION (XFRM)
4. 8:522019: Libreswan
5. 13:33XFRMi virtual interface
6. 15:32TCP support for Remote Access VPN
7. 18:14Per-CPU support for high speed IPsec SAS
8. 21:07Libreswan testing
9. 22:44IPsec deployment types
10. 28:02Remote Access Server interface
11. 34:49Recap: Enterprise wide (mesh) encryption

" related talks

• 54mOpportunistic Encryption Using IPsecPaul Wouters · Linux Security Summit 2016
• 25mOver view of linux tunnelsHangbin Liu · DevConf.CZ 2023
• 33mFull-Mesh IPsec Network: 10 Dos and 500 Don'tsFran Garcia · SREcon16 Europe
• 28mPsycho Security - End to End EncryptionJon Price · Cloud Foundry Summit 2015
• 21mHow to Use XDP and eBPF to Accelerate IPSec Throughput by 400%Ryan Drew · Cilium + eBPF Day North America 2024
• 26mBuilding a composable IPsec implementation with RustDaiki Ueno · DevConf.CZ 2025
• 50mUsing FOSS to Protect Embedded Systems Data in TransitBassem Nomany · foss-north 2026
• 32mSecure Your Cloud with the IPsec BOSH Release - Stefan Lay, SAPStefan Lay · Cloud Foundry Summit Europe 2017