Byzantium/Byzantium — Issue #58: Request for comments: Mesh nodes deploy opportunistic IPsec to protect traffic?
Author: virtadpt
Created: 2011-11-10 20:34:56+00:00
State: open

Another possible means of protecting traffic between mesh nodes (for certain) and some clients (depending on their nature) is to deploy opportunistic IPsec in Byzantium. We could do this with Openswan (http://openswan.org/) and have it start at boot-time.

Adding this functionality will take some research and experimentation to get working. I'm not famliar with Openswan and it's been years since I've done anything with IPsec. I've heard from some people who run Tor nodes that they have opportunistic IPsec set up to try to encrypt traffic to endpoints automatically, though I don't yet understand how they do this.

Thoughts?