Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-26776

[RFE] Support `leftsubnet` in IPSec configuration in NM-libreswan

XMLWordPrintable

    • Normal
    • ZStream
    • sst_network_management
    • ssg_networking
    • 13
    • 5
    • False
    • Hide

      None

      Show
      None
    • Yes
    • NMT - RHEL-9.5 DTM 8
    • Approved Blocker
    • Hide

      User story:
      As a system administrator, I need NM-libreswan to process leftsubnet configurations, to establish secure net2net IPsec tunnels between specified subnets.

      Acceptance criteria:
      Given a system administrator configuring IPsec connection that includes leftsubnet and rightsubnet specifications,
      When they configures these parameters in NM-libreswan,
      Then NM-libreswan should configure the IPsec tunnel to encrypt traffic between these subnets, ensuring that the XFRM policies reflect the specified subnet configurations.

      Definition of Done:

      • The implementation meets the acceptance criteria
      • Unit test and integration test are written and pass
      • The code is part of a downstream build attached to an errata
      • The Release Note text is written following the feature-reason-result format.
      • The fix needs to be backported into RHEL-9.2
      Show
      User story: As a system administrator, I need NM-libreswan to process leftsubnet configurations, to establish secure net2net IPsec tunnels between specified subnets. Acceptance criteria: Given a system administrator configuring IPsec connection that includes leftsubnet and rightsubnet specifications, When they configures these parameters in NM-libreswan, Then NM-libreswan should configure the IPsec tunnel to encrypt traffic between these subnets, ensuring that the XFRM policies reflect the specified subnet configurations. Definition of Done: The implementation meets the acceptance criteria Unit test and integration test are written and pass The code is part of a downstream build attached to an errata The Release Note text is written following the feature-reason-result format. The fix needs to be backported into RHEL-9.2
    • Pass
    • Unspecified Release Note Type - Unknown

      To fulfill the requirements of net2net IPsec scenarios, such as those encountered in OpenShift clusters, NM-libreswan needs to implement support for `leftsubnet`. This functionality will enable the creation of XFRM policies for specified network subnets.

      For more details on the use case, see https://docs.google.com/document/d/1togmmRF6u3gEorwQU2Zv1PQ--yILOC00GgykhwoAEAg/edit?usp=sharing

            bgalvani@redhat.com Beniamino Galvani
            rh-ee-sfaye Stanislas Faye
            Network Management Team Network Management Team
            Vladimir Benes Vladimir Benes
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: