OpenIKED on Ubuntu 24.04

Name: OpenIKED on Ubuntu 24.04
Brand: cloudimg

Azure Networking

standards based IKEv2 for IPsec VPN tunnels, ready on first boot

Base

Hardened build

minimal ports, security patches applied at build time

Access

Unique credentials

generated on first boot, readable only by root

Verified

Boots working

services pass a health gate before release

Support

24/7, 365 days

by email and live chat, 24 hour response SLA

Overview

OpenIKED is the OpenBSD project's free implementation of the Internet Key Exchange version 2 protocol. It authenticates two VPN peers to each other, negotiates the cipher suite, and installs the security associations the kernel uses to encrypt traffic, driving the kernel IPsec stack directly so the data path stays in the kernel.

Why the cloudimg image

The cloudimg image generates a unique IKEv2 host keypair on first boot, so no two launches share a gateway identity and no key is ever baked into the image. It ships a self test that runs a real IKEv2 negotiation and asserts the kernel installed keyed ESP security associations, plus a negative control proving a wrong peer credential is refused. The packaged AppArmor profile is repaired for Ubuntu 24.04 af_unix mediation so the daemon runs fully confined. A paired deploy guide and 24/7 support are included.

Common uses

Site to site IPsec tunnels between cloud and on premises networks
A standards based IKEv2 gateway interoperating with third party IPsec equipment
Encrypting traffic between two cloud networks without a proprietary appliance

Overview

Why the cloudimg image

Common uses

More in Networking

AdGuard Home - Network-wide Ad Blocking DNS

Apache Guacamole

frp

iPerf3 on Alma Linux 9 with Support

iPerf3 on Rocky Linux 9 (ARM) with Support

Pi-hole