Re: [openstack-dev] [Neutron][VPNaaS] Supporting OpenSwan or StrongSwan or Both?

2013-08-20 Thread Paul Michali
Was the original reasoning to use StrongSwan over OpenSwan, only because of community support? I vaguely recall something mentioned about StrongSwan having additional capabilities or something. Can anyone confirm? As far as which option, it sounds like B or C-2 are the better choices, just

Re: [openstack-dev] [Neutron][VPNaaS] Supporting OpenSwan or StrongSwan or Both?

2013-08-20 Thread Nachi Ueno
Hi Paul 2013/8/20 Paul Michali p...@cisco.com: Was the original reasoning to use StrongSwan over OpenSwan, only because of community support? I vaguely recall something mentioned about StrongSwan having additional capabilities or something. Can anyone confirm? As far as which option, it

[openstack-dev] [Neutron][VPNaaS] Supporting OpenSwan or StrongSwan or Both?

2013-08-19 Thread Nachi Ueno
Hi folks I would like to discuss whether supporting OpenSwan or StrongSwan or Both for ipsec driver? We choose StrongSwan because of the community is active and plenty of docs. However It looks like RHEL is only supporting OpenSwan. so we should choose (A) Support StrongSwan (B) Support

Re: [openstack-dev] [Neutron][VPNaaS] Supporting OpenSwan or StrongSwan or Both?

2013-08-19 Thread Salvatore Orlando
As I said during the meeting, I am happy to support both as long as the code churn is reasonably contained and the chances of strongswan support introducing bugs into openswan driver are negligible. Openswan should be the default solution, in muy opinion. Salvatore On 20 August 2013 00:15,

Re: [openstack-dev] [Neutron][VPNaaS] Supporting OpenSwan or StrongSwan or Both?

2013-08-19 Thread Nachi Ueno
Hi Salvatore Thank you for your comment. I'm adding OpenSwan support as additional driver, so it is safe for strongswan. Best Nachi 2013/8/19 Salvatore Orlando sorla...@nicira.com: As I said during the meeting, I am happy to support both as long as the code churn is reasonably contained and