Alternatives to strongSwan

An open-source IPsec VPN implementation using the IKEv2 and IKEv1 key exchange protocols. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as strongSwan.

  • Libreswan

    A free IPsec and IKE VPN implementation for Linux, FreeBSD and macOS.

    FreeOpen sourcemacOSLinuxCommand line

    Libreswan is another GPL-2.0 IPsec implementation with IKEv1 and IKEv2, packaged in Fedora, RHEL and Arch, but it does not run on Windows or Android.

  • SoftEther VPN

    An open-source multi-protocol VPN server and client for remote access and site-to-site networking.

    FreeOpen sourceWindowsmacOSLinuxSelf-hosted

    SoftEther VPN is a multi-protocol server and client with an SSL-VPN that passes restrictive firewalls, under Apache-2.0, with many options to learn.

  • OpenVPN Community

    The VPN protocol and client that has been the default for two decades, and still runs on everything.

    FreeOpen sourceWindowsmacOSLinuxAndroidiOSCommand line

    OpenVPN Community replaces IPsec with an SSL-based protocol that runs over TCP or UDP on any port, with clients on every major platform.

  • WireGuard

    A small, fast VPN protocol and set of official clients that connect two machines by exchanging public keys.

    FreeOpen sourceWindowsmacOSLinuxAndroidiOSCommand line

    WireGuard swaps IKE negotiation for simple public-key exchange in a small, auditable protocol, but it is not a standards-based IPsec implementation.

  • Pritunl

    A self-hosted VPN server for OpenVPN, WireGuard and IPsec, managed through a web interface.

    FreeOpen sourceWindowsmacOSLinuxSelf-hosted

    Pritunl manages IPsec, OpenVPN and WireGuard servers from one web interface, replacing strongSwan's file and command-line configuration.

Also worth comparing

These listings name strongSwan as their own alternative, so the relationship runs both ways.

  • Algo VPN

    Ansible scripts that stand up a personal WireGuard and IPsec VPN.

    FreeOpen sourcemacOSLinuxCommand line

    strongSwan provides a full IKEv2 IPsec implementation across Linux, Android, macOS and Windows, but configuration requires solid IPsec knowledge and it has no WireGuard.

  • ocserv

    An open-source Linux SSL VPN server compatible with OpenConnect and AnyConnect clients.

    FreeOpen sourceLinuxSelf-hosted

    strongSwan switches to standards-based IPsec with IKEv2 and flexible virtual IP pools, running on Linux, Android, FreeBSD, macOS and Windows, configured through files.

Similar software

Related functionality, not a direct replacement.