Directories
¶
| Path | Synopsis |
|---|---|
|
Package cmd registers the IPsec VPN operational command handlers.
|
Package cmd registers the IPsec VPN operational command handlers. |
|
Package crypto implements the IKEv2 cryptographic primitives and proposal negotiation.
|
Package crypto implements the IKEv2 cryptographic primitives and proposal negotiation. |
|
Package dataplane abstracts installation of IPsec security associations and policies across xfrm and VPP backends.
|
Package dataplane abstracts installation of IPsec security associations and policies across xfrm and VPP backends. |
|
Package eap implements the EAP authentication framework and its MSCHAPv2 and TLS methods for IKEv2.
|
Package eap implements the EAP authentication framework and its MSCHAPv2 and TLS methods for IKEv2. |
|
Design: docs/architecture/ike/ipsec-7-ikev2-engine.md -- AUTH payload computation Related: remote_id.go -- remote identity policy and certificate binding Detail: cert_payload.go -- CERT payload assembly, the received-chain bound, Hash and URL RFC: rfc/short/rfc7296.md -- Authentication of the IKE SA (Section 2.15) RFC: rfc/short/rfc7427.md -- Digital Signature AUTH method 14
|
Design: docs/architecture/ike/ipsec-7-ikev2-engine.md -- AUTH payload computation Related: remote_id.go -- remote identity policy and certificate binding Detail: cert_payload.go -- CERT payload assembly, the received-chain bound, Hash and URL RFC: rfc/short/rfc7296.md -- Authentication of the IKE SA (Section 2.15) RFC: rfc/short/rfc7427.md -- Digital Signature AUTH method 14 |
|
Package ipsec defines the IPsec data model types and parses their configuration.
|
Package ipsec defines the IPsec data model types and parses their configuration. |
|
yang
Package yang embeds and registers the IPsec configuration YANG schema module.
|
Package yang embeds and registers the IPsec configuration YANG schema module. |
|
Package transport implements the IKE UDP transport with NAT detection and keepalive handling.
|
Package transport implements the IKE UDP transport with NAT detection and keepalive handling. |
|
Design: docs/architecture/wire/buffer-writer.md -- payload chain parsing RFC: rfc/short/rfc7296.md -- encrypted payload contents (Section 3.14)
|
Design: docs/architecture/wire/buffer-writer.md -- payload chain parsing RFC: rfc/short/rfc7296.md -- encrypted payload contents (Section 3.14) |
|
Package yang embeds and registers the IPsec operational command YANG schema module.
|
Package yang embeds and registers the IPsec operational command YANG schema module. |
Click to show internal directories.
Click to hide internal directories.