[ops] Inquiry Regarding Addition of DH Groups in OpenStack VPNaaS
Hello , I hope this message finds you well. I am reaching out to inquire about the possibility of adding additional DH (Diffie-Hellman) groups to the VPNaaS (VPN as a Service) project in OpenStack. Currently, our setup involves using DH groups 14, 16, 20, and 21 on Fortigate routers. However, the available DH groups at the OpenStack Web UI for creating IPSEC policies are limited to groups 2, 5, and 14. Could you please provide insights into whether there are plans to introduce more DH groups into the VPNaaS project? This addition would greatly benefit our configurations and improve compatibility with our existing infrastructure. Thank you in advance for any information or guidance you can provide on this matter. Best regards, Shubham
Hi There is patch series for this effort: https://review.opendev.org/q/topic:%22bug/1938284%22 Please check and if it covers your needs help with the review :-) Best wishes Lajos Katona (lajoskatona) Shubham Yadav <shubham.k.yadav03@gmail.com> ezt írta (időpont: 2024. máj. 10., P, 15:38):
Hello ,
I hope this message finds you well. I am reaching out to inquire about the possibility of adding additional DH (Diffie-Hellman) groups to the VPNaaS (VPN as a Service) project in OpenStack.
Currently, our setup involves using DH groups 14, 16, 20, and 21 on Fortigate routers. However, the available DH groups at the OpenStack Web UI for creating IPSEC policies are limited to groups 2, 5, and 14.
Could you please provide insights into whether there are plans to introduce more DH groups into the VPNaaS project? This addition would greatly benefit our configurations and improve compatibility with our existing infrastructure.
Thank you in advance for any information or guidance you can provide on this matter.
Best regards, Shubham
participants (2)
-
Lajos Katona
-
Shubham Yadav