Where do I send my money and when can I have it ??
Seriously. I just got a job this morning for an IPSec connect. Would love to use DD-WRT. Happy to pay an acceptable amount for the feature (will discuss offline if required)
Posted: Thu Oct 06, 2011 14:16 Post subject: I'd pay if it was resonably priced.
I feel that dd-wrt gives me plenty under normal circumstances for free. I'd be willing to pay for a resonably priced licence to get extra functions like IPSEC, GRE, and PIM. Time is not free, and if they are willing to give us a LOT for free we should be willing to give a little for more.
Posted: Thu Oct 06, 2011 20:35 Post subject: Re: I'd pay if it was resonably priced.
clorox wrote:
I feel that dd-wrt gives me plenty under normal circumstances for free. I'd be willing to pay for a resonably priced licence to get extra functions like IPSEC, GRE, and PIM. Time is not free, and if they are willing to give us a LOT for free we should be willing to give a little for more.
x2 couldn't have worded it better myself. I have many Asus RT-N16 deployed fwiw.
Posted: Wed Oct 19, 2011 19:08 Post subject: Should IP-Sec be a Paid Option?
I too would be willing to pay for IP-Sec. I have struggled enough trying to couple old VPN junk I have laying around to my DD-WRT router trying to connect an IP-Sec VPN to a customer's commercial router that doesn't support an alternative for what I am trying to do.
2 weeks ago when I (dumb consumer) searched for VPN documentation and found this thread I really was willing to pay for an IPsec implementation. For cross-checking I headed over to OpenWrt and found a nearly fully featured UCI configurable IPsec implementation in the wiki. It is not web driven but after half a day of try & error I was able to establish a VPN with a friend of mine.
I know that this does not help for the current discussion but maybe a tip for those who are not willing to pay.
Full ipv6 support become more and more important.
Hobby enthusiast with need for private vpn can use pptp. If radius support is enabled for pptp server you may have increased security.
For cross-checking I headed over to OpenWrt and found a nearly fully featured UCI configurable IPsec implementation in the wiki. It is not web driven but after half a day of try & error I was able to establish a VPN with a friend of mine.
I know that this does not help for the current discussion but maybe a tip for those who are not willing to pay.
Not been back here in quite a while, but as I was talking to someone about this the other day thought I'd pop back.
I was working on this before (after I got mostly full IPv6 working including DHCP and DNS) but ran into a number of problems. It really is not just a case of adding CONFIG_XFRM to the kernel. Newer builds have it, and I've built the extra required modules to go with it. The problem I had with IPSEC-tools was its inability to determine the kernel's supported cipher set.
From there I started attempting strongswan, but have no idea how far I got. Maybe when I get chance I'll look into it again.
So has a decision been made on this? As long as the price is reasonable, I would for sure pay for IPsec VPN. Although I use the PPTP it has now and feel secure enough for what I do, I still would pay for better security.
Yeah I can see how the router could be an ipsec end-point but the way I do ipsec is end-to-end, the router is not involved at all, except for routing IKE and ESP packets. End-to-End is the way to go folks.
I think a fee could be charged for IP Sec. But it should be a reasonable flat fee, without per-user charges. No one is going to use this as an enterprise solution anyway; residential users, small business owners, and geeks that like to tinker shouldn't be restricted by per-user fees.