Skip to main content
Join the official 2019 Python Developers SurveyStart the survey!

Python encapsulating security payload server.

Project description

IPSec IKE(v1,v2) PSK implemented in pure Python. (For Research Purposes Only)

Introduction

All IPSec softwares are stupid, clumsy and hard to configure. So comes python-esp.

  • NO app install needed
  • NO server configuration file
  • NO network interface added
  • NO iptables or “/etc” modified

Press “RETURN” to start, “CTRL+C” to stop.

QuickStart

$ pip3 install pesp
Successfully installed pesp-0.1.3
$ pesp -p yourpassword
Serving on UDP :500 :4500...
^C

Open server’s UDP port :500 :4500 to your device. In device’s system setting, add an “IPSec” (iOS) or “IPSec IKE PSK” (Android) node, write down the server address and password “yourpassword”. Connect.

You should change the default password “test” to keep higher security. See “pesp -h” for more options.

Features

  • Clean, lightweight
  • IKEv1, IKEv2, L2TP auto-detection
  • TCP stack implementation
  • TCP/UDP tunnel support
  • DNS cache

Protocols

Protocol Name Name in iOS Name in Android Name in MacOS Name in Windows
L2TP PSK ✔ L2TP “L2TP/IPSec PSK” L2TP/IPSec L2TP
IKEv1 PSK ✔ IPsec [1] “IPSec Xauth PSK” Cisco IPSec IPSec
IKEv2 PSK ✔ IKEv2 [2] “IPSec IKEv2 PSK” IKEv2 IKEv2
[1] Do not use certificates
[2] Turn off “user authentication”

Specifications

IPSec/ESP

  • RFC2406 IP Encapsulating Security Payload (ESP)
  • RFC3947 Negotiation of NAT-Traversal in the IKE
  • RFC3948 UDP Encapsulation of IPsec ESP Packets

IKE/ISAKMP

  • RFC2407 The Internet IP Security Domain of Interpretation for ISAKMP
  • RFC2408 Internet Security Association and Key Management Protocol (ISAKMP)
  • RFC2409 The Internet Key Exchange (IKE)
  • IANA_01 Internet Key Exchange (IKE) Attributes
  • IANA_02 “Magic Numbers” for ISAKMP Protocol
  • DRAFT_1 The ISAKMP Configuration Method
  • DRAFT_2 Extended Authentication within IKE (XAUTH)

IKEv2

  • RFC7296 Internet Key Exchange Protocol Version 2 (IKEv2)
  • IANA_03 Internet Key Exchange Version 2 (IKEv2) Parameters
  • RFC3748 Extensible Authentication Protocol (EAP)
  • RFC5106 The Extensible Authentication Protocol-Internet Key Exchange Protocol version 2 (EAP-IKEv2) Method

Diffie Hellman

  • RFC3526 More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)
  • RFC5903 Elliptic Curve Groups modulo a Prime (ECP Groups) for IKE and IKEv2
  • RFC5114 Additional Diffie-Hellman Groups for Use with IETF Standards

L2TP

  • RFC2661 Layer Two Tunneling Protocol “L2TP”
  • RFC3193 Securing L2TP using IPsec
  • RFC1549 PPP in HDLC Framing
  • RFC1661 The Point-to-Point Protocol (PPP)
  • RFC1332 The PPP Internet Protocol Control Protocol (IPCP)

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for pesp, version 0.1.7
Filename, size File type Python version Upload date Hashes
Filename, size pesp-0.1.7-py3-none-any.whl (34.4 kB) File type Wheel Python version py3 Upload date Hashes View hashes
Filename, size pesp-0.1.7.tar.gz (34.9 kB) File type Source Python version None Upload date Hashes View hashes

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN SignalFx SignalFx Supporter DigiCert DigiCert EV certificate StatusPage StatusPage Status page