strongSwan
strongswan.org
Spec sheet
- Purpose
- strongSwan implements Internet Key Exchange protocols to secure IP traffic in policy-based and route-based IPsec VPN scenarios.Read 8 Oct 2026 · strongswan.org
- Platforms
- The project says it runs on Linux and has been ported to Android, FreeBSD, macOS, iOS, and Windows.Read 8 Oct 2026 · strongswan.org
- Free plan
- YesRead 22 Sep 2026 · strongswan.org
- Integrations
- A NetworkManager plugin integrates strongSwan with Linux desktops, and an Android app is available.Read 8 Oct 2026 · strongswan.org
- Support
- Free support includes documentation, GitHub Discussions, and an IRC channel; commercial support is also available from listed providers.Read 8 Oct 2026 · strongswan.org
- Founded
- 2005Read 28 Sep 2026 · strongswan.org
- Access model
- vpnRead 22 Sep 2026 · strongswan.org
- Admin control level
- advancedRead 22 Sep 2026 · strongswan.org
- Audit logs
- YesRead 22 Sep 2026 · strongswan.org
- Authentication
- Authentication options include EAP methods, X.509 certificates, pre-shared keys, and IKEv2 multiple authentication exchanges.Read 8 Oct 2026 · strongswan.org
- Cryptography
- It supports NIST elliptic-curve groups, X25519, Ed25519, and multiple classic and post-quantum key exchanges, including ML-KEM.Read 8 Oct 2026 · strongswan.org
- Device posture
- YesRead 22 Sep 2026 · strongswan.org
- Distribution
- The download page links to distribution binary packages, source archives, a Docker image for trying the software, and the Android app.Read 8 Oct 2026 · strongswan.org
- IKE protocols
- It supports IKEv2 and IKEv1, IPv6 tunnel and transport connections, MOBIKE, NAT traversal, and IKEv2 message fragmentation.Read 8 Oct 2026 · strongswan.org
- Key protection
- Private keys and certificates can be stored on smartcards through PKCS #11 or protected by a TPM 2.0.Read 8 Oct 2026 · strongswan.org
- Modularity
- Its plugin system can add cryptographic algorithms, credentials, authentication methods, configurations, and access to IPsec and network stacks.Read 8 Oct 2026 · strongswan.org
- Notable support limit
- The listed core developer offers development work and licensing, but not commercial configuration support.Read 8 Oct 2026 · strongswan.org
- Ownership
- The project page says secunet Security Networks AG acquired strongSwan's intellectual property rights in June 2022.Read 8 Oct 2026 · strongswan.org
- Project history
- strongSwan launched in 2005 as a fork of the discontinued FreeS/WAN project.Read 8 Oct 2026 · strongswan.org
- Release signing
- The project says releases and security patches are signed with its published PGP key.Read 8 Oct 2026 · strongswan.org
- Security advisories
- The project publishes vulnerability advisories and machine-readable OSV records, with patches linked from advisories.Read 8 Oct 2026 · strongswan.org
- Site-to-site networking
- YesRead 22 Sep 2026 · strongswan.org
- Supported platforms
- Linux,Android,FreeBSD,macOS,iOS,WindowsRead 22 Sep 2026 · strongswan.org
Plans and prices
GPLv2 open-source license Free Open-source GPLv2; most components also have an optional commercial non-GPL license Read 8 Oct 2026 · strongswan.org
Commercial license and support Priced on request Commercial non-GPL license available for most components; optional support has two response-time/SLA levels Read 8 Oct 2026 · strongswan.org
Where Specifiction places it
- Business VPN Software#32 of 948.4
- Virtual Private Network Software#22 of 548.3
- Connectivity Solutions#13 of 238.3