# đŸ„ł Network IPv6 - IPSec - strongSwan - Modern Security communication **URL:** \ **Category:** Pause CafĂ©\ **Tags:** securitĂ©, network\ **Created:** [FĂ©vrier 9, 2024, 3:49 UTC](https://www.debian-fr.org/t/network-ipv6-ipsec-strongswan-modern-security-communication/89528 "2024-02-09T15:49:26Z")\ **Posts on this page:** 1\ **Showing post:** 12
**Author:** ![anon36725218](https://www.debian-fr.org/letter_avatar_proxy/v4/letter/a/8e8cbc/32.png) [@anon36725218](https://www.debian-fr.org/u/anon36725218)\ **Post date:** [Janvier 17, 2025, 1:13 UTC](https://www.debian-fr.org/t/network-ipv6-ipsec-strongswan-modern-security-communication/89528/12 "2025-01-17T01:13:28Z")
Bonjour et bonne annĂ©e 2025 Ă  toutes et Ă  tous ! Pour infos (les connexions ULA IPv6 inter-sites fonctionnent trĂšs bien) : Mes « frontaux Â» Web Apache qui pointent vers 3 serveurs en « backend Â» plus 1 en standby. ``` Frontends : FR (Valdeblore) : srv.fr.lab3w.com, CA (Montreal) : srv.ca.lab3w.com, DE (Frankfurt) : vps.de.ipv10.net, UK (London) : vps.uk.ipv10.net. Backends : 2 in CA and 1+1 in FR. ``` Serveurs #ZW3B #LAB3W 😉 Serveurs chez OVHcloud\_CA OVHcloud\_DE OVHcloud\_UK Orange\_FR 😁 J’ai fais un papier sur mon portfolio [2025 - Serveurs ZW3B | LAB3W | IPv10 : Frontaux Web dans plusieurs pays.](https://portfolio.lab3w.com/xp#d250114a) Les impressions d’écrans des frontaux Apache Web Balancers manager : [https://www.zw3b.fr/pub/screens/apache/?C=M;O=D](https://www.zw3b.fr/pub/screens/apache/?C=M;O=D) Exemple d’applications (web) : [![](https://www.zw3b.fr/pub/screens/apache/Capture%20d%27%c3%a9cran%202025-01-15%20231320%20-%20Apache%20Load%20Balancer%20-%20zw3b.fr%20-%20UK-DE.png)](https://www.zw3b.fr/pub/screens/apache/Capture%20d'%c3%a9cran%202025-01-15%20231320%20-%20Apache%20Load%20Balancer%20-%20zw3b.fr%20-%20UK-DE.png) Romain (LAB3W.ORJ) - O.Romain.Jaillet-ramey - Fondateur ZW3B.FR|TV|EU|NET|COM|BLOG * * * Je vous ajoute les liens VPN StrongSwan v6 en utilisant la librairie « Open Quantum Safe (OQS) project Â» qui vise Ă  soutenir la transition vers une cryptographie rĂ©sistante aux attaques quantiques. Il y a 3 liens IPSec en permanence connectĂ©s au serveur du Canada : ca-de | ca-uk | ca-fr đŸ€  ```auto IKEv2 : KE1_KYBER_L3/KE2_BIKE_L3/KE3_HQC_L3/KE4_HQC_L5 ESP : KE1_KYBER_L3/KE2_BIKE_L3/KE3_HQC_L3/KE4_HQC_L5 ``` ```auto 05:22:26 root@srv.ca.lab3w.com:~ # swanctl --list-sas ca-de: #1113, ESTABLISHED, IKEv2, de4990cf64c5baaf_i d1e1464e53d87cbf_r* local 'srv.ca.lab3w.com' @ 158.69.126.137[4500] remote 'vps.de.ipv10.net' @ 135.125.133.51[4500] [fec3::1] AES_CBC-256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/CURVE_25519/KE1_KYBER_L3/KE2_BIKE_L3/KE3_HQC_L3/KE4_HQC_L5 established 1806s ago, rekeying in 11808s ca-de: #27888, reqid 2, INSTALLED, TUNNEL, ESP:AES_CBC-256/HMAC_SHA2_256_128/CURVE_25519/KE1_KYBER_L3/KE2_BIKE_L3/KE3_HQC_L3 installed 43s ago, rekeying in 128s, expires in 156s in c5176f07, 82141 bytes, 1003 packets, 0s ago out c378207d, 150822 bytes, 618 packets, 0s ago local fc00:41d0:801:2000::/64 fc00:5300:60:9389::/64 fc01::10:106:0:0/104 fc01::10:126:42:0/112 fc01::172:16:0:0/104 fc01::192:168:0:0/104 fec0::/16 fec1::/16 fec2::1/128 remote fc00:41d0:701:1100::/64 fec3::1/128 ca-fr: #1111, ESTABLISHED, IKEv2, 723fe3944efc30e2_i* 27263be64c91817c_r local 'srv.ca.lab3w.com' @ 158.69.126.137[4500] remote 'srv.fr.lab3w.com' @ 90.5.102.244[4500] AES_CBC-256/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/CURVE_448/KE4_HQC_L5 established 9780s ago, rekeying in 4067s ca-fr: #27885, reqid 1, INSTALLED, TUNNEL-in-UDP, ESP:AES_CBC-256/HMAC_SHA2_256_128/CURVE_25519/KE1_KYBER_L3/KE2_BIKE_L3/KE3_HQC_L3/KE4_HQC_L5 installed 465s ago, rekeying in 4435s, expires in 5475s in c0d8ecbb, 2272106 bytes, 12243 packets, 0s ago out c60b4300, 1403489 bytes, 14380 packets, 0s ago local fc00:41d0:701:1100::/64 fc00:41d0:801:2000::/64 fc00:5300:60:9389::/64 fec0::/16 fec2::1/128 fec3::1/128 remote fc01::10:106:0:0/104 fc01::10:126:42:0/112 fc01::172:16:0:0/104 fc01::192:168:0:0/104 fec1::/16 ca-uk: #1089, ESTABLISHED, IKEv2, e65b5f0cba6f311b_i 8a4dfc7162b7c490_r* local 'srv.ca.lab3w.com' @ 158.69.126.137[4500] remote 'vps.uk.ipv10.net' @ 57.128.171.43[4500] [fec2::1] AES_CBC-256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/CURVE_25519/KE1_KYBER_L3/KE2_BIKE_L3/KE3_HQC_L3/KE4_HQC_L5 established 73418s ago ca-uk: #27872, reqid 4, INSTALLED, TUNNEL, ESP:AES_CBC-256/HMAC_SHA2_256_128/CURVE_25519/KE1_KYBER_L3/KE2_BIKE_L3/KE3_HQC_L3 installed 2426s ago in c9c739ed, 5017104 bytes, 57764 packets, 0s ago out c7b8b75b, 11242106 bytes, 36951 packets, 0s ago local fc00:41d0:701:1100::/64 fc00:5300:60:9389::/64 fc01::10:106:0:0/104 fc01::10:126:42:0/112 fc01::172:16:0:0/104 fc01::192:168:0:0/104 fec0::/16 fec1::/16 remote fc00:41d0:801:2000::/64 fec2::1/128 05:22:31 root@srv.ca.lab3w.com:~ # ``` Ça fonctionne fort ce « Strong Secure Wide Area Network Â» 😎 * * * ```auto root@srv.fr.lab3w.com:~ # host www.zw3b.fr www.zw3b.fr has address 90.5.102.244 www.zw3b.fr has address 158.69.126.137 www.zw3b.fr has address 57.128.171.43 www.zw3b.fr has address 135.125.133.51 www.zw3b.fr has IPv6 address 2607:5300:60:9389::1 www.zw3b.fr has IPv6 address 2001:41d0:801:2000::44f9 www.zw3b.fr has IPv6 address 2001:41d0:701:1100::6530 www.zw3b.fr has IPv6 address 2a01:cb1d:5:af00::1 ``` En passant j’attends toujours la gestion du Reverse DNS / IPv6 chez Orange ; et IPv4 ! > _Note de Moi-mĂȘme : En fait : je n’ai pas essayĂ© de crĂ©er un serveur DNS Bind9 chez moi (Orange\_FR) et de configurer mes zones reverse IPv6 aprĂšs avoir dĂ©lĂ©guer (depuis la livebox) et d’essayer si çà rĂ©pond (NXDOMAIN Found my domain name pointer) de l’extĂ©rieur. Qui sait !?!_ Server FR → [srv.fr.lab3w.com](http://srv.fr.lab3w.com) chez Orange\_FR : ```auto root@srv.fr.lab3w.com:~ # host 2a01:cb1d:5:af00::1 Host 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.f.a.5.0.0.0.d.1.b.c.1.0.a.2.ip6.arpa not found: 3(NXDOMAIN) root@srv.fr.lab3w.com:~ # host 90.5.102.244 244.102.5.90.in-addr.arpa domain name pointer apoitiers-657-1-83-244.w90-5.abo.wanadoo.fr. ``` Server CA → [srv.ca.lab3w.com](http://srv.ca.lab3w.com) chez OVHcloud\_CA : ```auto root@srv.fr.lab3w.com:~ # host 2607:5300:60:9389::1 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.9.8.3.9.0.6.0.0.0.0.3.5.7.0.6.2.ip6.arpa domain name pointer srv.ca.lab3w.com. root@srv.fr.lab3w.com:~ # host 158.69.126.137 137.126.69.158.in-addr.arpa domain name pointer mail.zw3b.eu. ``` Server DE → [vps.de.ipv10.net](http://vps.de.ipv10.net) chez OVHcloud\_DE : ```auto root@srv.fr.lab3w.com:~ # host 2001:41d0:701:1100::6530 0.3.5.6.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.1.1.0.7.0.0.d.1.4.1.0.0.2.ip6.arpa domain name pointer vps.de.ipv10.net. root@srv.fr.lab3w.com:~ # host 135.125.133.51 51.133.125.135.in-addr.arpa domain name pointer vps.de.ipv10.net. ``` Server UK → [vps.uk.ipv10.net](http://vps.uk.ipv10.net) chez OVHcloud\_UK : ```auto root@srv.fr.lab3w.com:~ # host 2001:41d0:801:2000::44f9 9.f.4.4.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.1.0.8.0.0.d.1.4.1.0.0.2.ip6.arpa domain name pointer vps.uk.ipv10.net. root@srv.fr.lab3w.com:~ # host 57.128.171.43 43.171.128.57.in-addr.arpa domain name pointer vps.uk.ipv10.net. ``` Je n’habite pas Poitiers ; j’habite Ă  68 kilomĂštres de Nice dans les Alpes-Maritimes. 😆 --- _[View the full topic](https://www.debian-fr.org/t/network-ipv6-ipsec-strongswan-modern-security-communication/89528)._