Feature Request: Route Based VPN

[rhyse]

Hi

Is there the possibility to support route based VPN's ? This is becoming more prevelant when connecting to specific cloud providers (ie Azure)

IE: (I haven't verified any of the links as working implementations)
https://genneko.github.io/playing-with-bsd/networking/freebsd-vti-ipsec
https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN
https://vincent.bernat.im/en/blog/2017-route-based-vpn

Thoughts ?

Thanks

[mickrussom]

.

+1

pfSense is making this a 2.5 feature and 2.5 is going to require AES-NI.

[mimugmail]

We can have a look when 18.1 is released. Havent tested vti in 11.1 yet.

[skyjam]

+1   +1   +1   +1...

[ccesario]

+1 ... PFSense already support it

https://redmine.pfsense.org/issues/8544

[franco]

Sure, who will contribute? I'll offer review.


Cheers,
Franco

[mimugmail]

You can vote here if you like

https://github.com/opnsense/core/issues/2332

Perhaps someone is willing to help.


In theory it's working fine ...

[Dasch]

I want to know how about this. I think it is a really important feature!
Is it possible to get it in the next time?

[mimugmail]

Not before 19.1 .. hopefully with 19.7.

[Dasch]

And when will 19.1 or 19.7 be released?

[mimugmail]

20(19) January (1)
20(19) July (7)

[Dasch]

20(19) January (1)
20(19) July (7)

Thanks for that information.

Is it sure, that this function will be implemented then? Or is it a "maybe"

[pkernstock]

I personally think it's more a "maybe", as what I've seen in the previous linked GitHub issue. It's also quite a important feature for me - basically one of the core reasons I haven't migrated over to OPNsense yet.

[franco]

With certain users, it's always that one feature we don't have. We can't be good at everything all the time.


Cheers,
Franco

[dragon2611]

It's one of the reasons I now use Linux/Iptables  in places where I would have used Opnsense