Reseña del libro "IPsec and IKEv2 For Secure Site-to-Site VPNs (en Inglés)"
Secure communication between networks should not depend on an untrusted Internet connection. IPsec and IKEv2 for Secure Site-to-Site VPNs is a practical guide to designing, deploying, securing, troubleshooting, and maintaining reliable IPsec VPN infrastructure. Whether you are connecting branch offices, homelabs, cloud environments, or private networks, this book helps you understand what happens beneath the “VPN connected” status and how to build tunnels that actually carry the traffic you need. You’ll learn how IPsec, IKEv2, ESP, IKE_SAs, CHILD_SAs, traffic selectors, Diffie-Hellman, and Perfect Forward Secrecy work together to protect network communication. The book then moves from architecture and network design into practical strongSwan deployment using the modern swanctl and VICI management model. Inside, you’ll explore: • Site-to-site VPN architecture, addressing, routing, and traffic selectors • IKEv2 and ESP cryptographic proposals • strongSwan configuration and tunnel verification • Firewall policies, NAT traversal, ESP-in-UDP, and NAT exemptions • MTU, fragmentation, and difficult network paths • PSK, certificates, PKI, and authentication security • Cryptographic hardening, rekeying, reauthentication, and DPD • Systematic IPsec troubleshooting using logs, packet captures, and VPN state • Monitoring, multi-site, hub-and-spoke, homelab, branch, and cloud VPN architectures The included field reference provides terminology, ports, protocols, configuration guidance, deployment checklists, troubleshooting references, and a complete secure site-to-site IPsec architecture. Build a deeper understanding of IPsec and IKEv2 and turn VPN troubleshooting from guesswork into a structured engineering process.
