The NetBSD Foundation publishes a Google Summer of Code 2026 report on funded work to modernize racoon2, the project’s IKEv1/IKEv2 key-exchange and IPsec policy daemon, as it is prepared to serve as an L2TP/IPsec or IKEv2 VPN server for built-in Windows, iOS and Android VPN clients. Student Artem Belan implemented RFC 7383 IKE fragmentation and RFC 3947 NAT original address handling, added RFC 7296 NAT-T traffic-selector substitution so configurations no longer need workaround selectors, unified the wildcard address macros, fixed IPv6 handling and enabled it by default, corrected policy and proposal negotiation to follow the peer’s proposal, and built a dependency-free unit-test framework that runs under sanitizers. All changes were merged upstream through pull requests #13-#39 between June and September 2026, with documentation, samples and a NEWS entry updated to match.
Google Summer of Code 2026 Reports: Improving and Stabilizing the racoon2 IKE Daemon in NetBSD
The NetBSD Foundation publishes a Google Summer of Code 2026 report on funded work to modernize racoon2, the project's IKEv1/IKEv2 key-exchange and IPsec policy daemon, as it is prepared to serve as an L2TP/IPsec or IKEv2 VPN server for built-in Windows, iOS and Android VPN clients. Student Artem Belan implemented RFC 7383 IKE fragmentation and RFC 3947 NAT original address handling, added RFC 7296 NAT-T traffic-selector substitution so configurations no longer need workaround selectors, unified the wildcard address macros, fixed IPv6 handling and enabled it by default, corrected policy and proposal negotiation to follow the peer's proposal, and built a dependency-free unit-test framework that runs under sanitizers. All changes were merged upstream through pull requests #13-#39 between June and September 2026, with documentation, samples and a NEWS entry updated to match.
Source: Netbsd