Audience
Network administrators and developers building IPsec VPN gateways, remote-access connections, and other VPN deployments.
About strongSwan
strongSwan is an open-source implementation of the Internet Key Exchange (IKE) protocols for securing IP traffic with policy- and route-based IPsec virtual private networks. It supports IKEv2 and IKEv1, IPv4 and IPv6 tunnels, mobility, certificate and pre-shared-key authentication, EAP methods, and a modular plugin system for cryptography, credentials, and networking. Network administrators and developers use it to build VPN gateways and connect network endpoints, from remote-access setups to complex IPsec deployments. The core software runs on Linux and has been ported to FreeBSD, macOS, Windows, Android, and iOS. An Android VPN client and a NetworkManager plugin for Linux desktops are also available. The source code is licensed under GPLv2, with commercial licensing available for most components and separate commercial support options. Documentation covers installation, configuration, features, and troubleshooting.
Other Popular Alternatives & Related Software
Google Cloud VPN
Google Cloud VPN is a managed Google Cloud service for connecting a Virtual Private Cloud (VPC) network with on-premises networks, other VPC networks, or peer networks in other cloud environments through encrypted IPsec site-to-site tunnels. It offers HA VPN gateways for redundant, dynamic BGP connections and Classic VPN gateways for static-routing configurations. Teams can configure gateways and tunnels in the Google Cloud console, Google Cloud CLI, or Compute Engine API, then monitor tunnel status and metrics. Cloud VPN supports IPv4 and, with HA VPN, IPv6; it can work with Cloud Router for dynamic route exchange and interoperate with compatible third-party VPN gateways that support IPsec and IKE. It is designed for private network connectivity, not client-to-gateway remote access or routing traffic to the public internet. Pricing is usage-based and includes gateway tunnel-hours and data transfer.
Learn more about Google Cloud VPN
UTunnel VPN and ZTNA
UTunnel provides Cloud VPN, ZTNA, and Mesh Networking solutions for secure remote access and seamless network connectivity.
ACCESS GATEWAY: Our Cloud VPN as a Service offers swift deployment of Cloud or On-Premise VPN servers. It utilizes OpenVPN and IPSec protocols, enables policy-based access control, and lets you deploy a Business VPN network effortlessly.
ONE-CLICK ACCESS: A Zero Trust Application Access (ZTAA) solution that simplifies secure access to internal business applications. It allows users to securely access them via web browsers without the need for a client application.
MESHCONNECT: This Zero Trust Network Access (ZTNA) and mesh networking solution based on WireGuard enables granular access controls to business network resources and easy creation of secure mesh networks.
SITE-TO-SITE VPN: The Access Gateway solution lets you easily set up secure Site-to-Site tunnels (IPSec) between UTunnel's VPN servers and hardware network gateways, firewalls & UTM systems.
Learn more about UTunnel VPN and ZTNA
Oracle Cloud Infrastructure Site-to-Site VPN
Oracle Cloud Infrastructure (OCI) Site-to-Site VPN is a managed IPsec service that connects an organization's on-premises network or another cloud network to a virtual cloud network (VCN) in OCI. It uses customer-premises equipment (CPE) on the remote side and OCI VPN endpoints to establish encrypted tunnels over the public internet. Administrators can create VPN connections, configure multiple tunnels for redundancy, and monitor tunnel status through the OCI Console, command-line tools, SDKs, or OCI APIs. The service supports hybrid-cloud access and network connections between OCI and remote sites or other cloud environments. Teams configure routing, security rules, and CPE settings to control traffic between networks. It is intended for cloud administrators and network teams managing hybrid connectivity.
Learn more about Oracle Cloud Infrastructure Site-to-Site VPN
Libreswan
Libreswan is an open-source implementation of IPsec and Internet Key Exchange (IKE) for building and managing encrypted virtual private network connections. It supports IKEv1 and IKEv2 and negotiates security associations between systems using IPsec, with capabilities including certificate-based authentication and NAT traversal. The software runs as an installed network service on Linux and several BSD systems, using the host operating system's IPsec stack. Administrators configure connections and credentials through configuration files and command-line tools, and can review tunnel status with the included ipsec utilities. Libreswan can be used to connect compatible IPsec peers for site-to-site or remote-access VPN deployments. It is intended for network administrators and security professionals who need to configure and operate IPsec VPN gateways or endpoints.
Learn more about Libreswan
Pricing
Starting Price:
$0
Pricing Details:
The core software is available under GPLv2 at no charge. Non-GPL licensing is available for most components, and maintenance and support contracts are available.
Free Version:
Free Version available.
Integrations
API:
Yes, strongSwan offers API access
No integrations listed.
Company Information
secunet Security Networks AG
Founded: 1997
Germany
strongswan.org
Videos and Screen Captures
IKE exchange diagram showing cookie notification messages and payloads.
Other Useful Business Software
$300 Free Credits to Build on Google Cloud
Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
Product Details
Platforms Supported
Windows
Mac
Linux
Android
On-Premises
Training
Documentation
Support
Online
strongSwan Frequently Asked Questions
Q: What kinds of users and organization types does strongSwan work with?
strongSwan works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does strongSwan support in their product?
strongSwan supports these languages: English.
Q: What kind of support options does strongSwan offer?
strongSwan offers support via online.
Q: Does strongSwan have an API?
Yes, strongSwan has an API.
Q: Does strongSwan have a mobile app?
Yes, strongSwan has a mobile app for Android.
Q: What type of training does strongSwan provide?
strongSwan provides training in the form of documentation.
Q: How much does strongSwan cost?
Pricing for strongSwan starts at $0.
