jkipsec 0.1.0

Userspace IKEv2/IPsec VPN responder for terminating iOS VPN tunnels and exposing the inner IP traffic. Pairs with jktcp for a fully userspace TCP/IP stack.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

//! `jkipsec` - userspace IKEv2 / IPsec implementation that hands raw IP frames
//! to `jktcp` for TCP processing.
//!
//! The high-level entry point is [`api::JkispecServer`]. Lower-level IKE
//! parser and crypto primitives are exposed in [`ike`] and [`crypto`] for
//! advanced use, but most users won't need them.
#![warn(missing_docs)]
//!
//! Layering:
//!
//! ```text
//!   UDP socket  ->  ike::Message (parse)  ->  session state machine
//!                                                     │
//!                                                     ▼
//!                                              esp::Sa (decrypt)
//!                                                     │
//!                                                     ▼
//!                                       AsyncRead/Write IP frames
//!                                                     │
//!                                                     ▼
//!                                              jktcp::Adapter
//! ```
//!
//! The crate is split so each layer can be tested in isolation.

pub mod api;
pub mod crypto;
pub mod esp;
pub mod ike;
pub mod session;