Compression in IPsec is slow (strongSwan only supports
DEFLATE) and there are security concerns about it
revealing information about the plaintext.
So for a little gain in bandwith, it does not seem to
be right to take that risk right now.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
GROUP_TYPE="MODP8192 MODP6144 MODP4096 MODP2048 ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
LIFETIME="28800"
PFS="on"
GROUP_TYPE="MODP8192 MODP6144 MODP4096 MODP2048 ECP521 ECP384 ECP256 ECP224 ECP192 CURVE25519"
LIFETIME="28800"
PFS="on"