Re: IPsec and IKEv2

[Sad Clouds <cryintothebluesky%gmail.com@localhost>]

On Wed, 10 Dec 2025 10:34:22 +0000 (GMT)
Stephen Borrill <netbsd%precedence.co.uk@localhost> wrote:

> I successfully used what was only in base to create an IPsec tunnel to 
> Azure not that long ago.
> 
> -- 
> Stephen
> 

Thanks. I assume you used racoon(8) and IKEv1 and as long as it works
reliably over long periods of time. Looking at IKEv2 features like: EAP
authentication, builtin NAT traversal, MOBIKE support, better security,
etc, I don't think I currently need any of those for my use cases.

Someone suggested trying WireGuard and the new wg(4) driver in
NetBSD-10. I will probably setup both and compare their performance
when used with NFSv3 traffic on a LAN.