IPsec (Internet Protocol security) offering end-to-end security for network traffic at the IP layer
This package is intended for users and administrators that still want to maintain IPsec (Internet Protocol security) offering end-to-end security for
network traffic at the IP layer. As of now IPsec based VPNs are still supported by all Apple IOS and OSx products and by BSD distributions (NetBSD, FreeBSD).
In 2019 Ubuntu decided to not further maintain ipsec-tools/racoon as development of ipsec-tools has been abandoned on Souceforge. ipsec-tools project there has not provided updates for racoon since 2014. In 2019 also Debian removed package ipsec-tools from further Debian releases (see bug https:/
"Racoon's lack of support for IKEv2, despite it being stable for a long time, and the availability of next-generation tunneling systems such as wireguard, also would seem to limit its future value. Setkey's functionality has been subsumed by 'ipxfrm'."
But ipsec-tools and racoon are still being maintained by FreeBSD, NetBSD and Apple. NetBSD has published several updates, e. g. fix for CVE-2016-10396 vulnerability and improvements for setkey command. A subset of the upstream changes and some further changes have been included here.
The related source code is now maintained on Github (https:/
For further information, tutorials and instructions please check the Internet. A good manual is available here: https:/
Project information
- Licence:
- Simplified BSD Licence
View full history Series and milestones
trunk series is the current focus of development.
