[Swan-dev] simple setup

D. Hugh Redelmeier hugh at mimosa.com
Fri Oct 5 16:16:08 UTC 2018


| From: Paul Wouters <paul at nohats.ca>

| Sure. We need support for .mobileconfig support so people can just
| import that on Linux as well as Apple devices. I don't know how to
| create a "profile" for Windows. I would be nice if we could do that
| too.

Fine.  But that isn't what I asked for.

To be at feature-parity with WireGuard, we don't need to interoperate.
Simple(!!!) libreswan to libreswan is what is required.

Any bonus features should be separate and later so that they don't
interfere with the simplicity.

Did I say "simple" often enough?

It's got to be simple.  Its got to look simple to someone who knows
nothing about this stuff.  It's almost an advertisement, but one that
actually is useful and informative.

It's got to be as simple as WireGuard.  Simpler that WireGuard would
be a big bonus.

Sadly, I think that there need to be "field notes" to trouble-shoot
first-time bring-up.  That's way more important that talking about
added features.  Lots of people have trouble getting this
stuff working in the most basic way and end up giving up, scarred for
life.

If our diagnostics make debugging such a simple setup hard, we ought
to look closely at making this easier.  Perhaps we need a bring-up
mode that is more helpful.  Perhaps we need a tool that automates some
of the debugging.


More information about the Swan-dev mailing list