security-policies: Add new "performance" policy

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/Makefile.am b/Makefile.am
index 560b65c9e98aefd0f6042a0dd8582121498e69b0..761e849ee258fa333fd9a5786cb3a197fc55074b 100644 (file)
--- a/Makefile.am
+++ b/Makefile.am
@@ -277,6 +277,7 @@ EXTRA_DIST += \
 systemconfig_vpndir = $(systemconfigdir)/vpn
 
 dist_systemconfig_vpn_security_policies_DATA = \
+       config/vpn/security-policies/performance \
        config/vpn/security-policies/system
 
 systemconfig_vpn_security_policiesdir = $(systemconfig_vpndir)/security-policies

diff --git a/config/vpn/security-policies/performance b/config/vpn/security-policies/performance
new file mode 100644 (file)
index 0000000..a40b454
--- /dev/null
+++ b/config/vpn/security-policies/performance
@@ -0,0 +1,7 @@
+CIPHER="AES128-GCM128 AES128-CBC"
+COMPRESSION="off"
+GROUP_TYPE="ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
+INTEGRITY="SHA256"
+KEY_EXCHANGE="ikev2"
+LIFETIME="28800"
+PFS="on"