strongswan.xml

<?xml version="1.0" encoding="UTF-8"?>
<!-- PSA Manifest instance - version 1.1 - 3 Sep 2014 -->
<PSAManifest xmlns="https://www.secured-fp7.eu/ref/PSA_manifest/"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="https://www.secured-fp7.eu/ref/PSA_manifest/ file:PSA_manifest_v1.1.xsd">
    <general_info>
        <PSA_ID>strongswan</PSA_ID>
        <name>Strongswan PSA</name>
        <description>Most of the enterprises have more than one branch office and is very commun to communicate them using an VPN. Corporate VPN PSA main point is to offer the user the possibility of having access to a server in the same enterprise, using an encrypted VPN tunnel. The tunnelling technology used for this PSA is Strongswan. </description>
        <web_site>https://www.secured-fp7.eu/</web_site>
        <version>1.00</version>
        <vendor>UPC</vendor>
        <author>Alicia Vila</author>
        <EULA></EULA>
        <licence>GPLv2</licence>
    </general_info>
    <functionality>
        <capability>
            <access_control>
                <traffic_filter>
                    <application_filter>
                        <name>Tunnelling</name>
                        <implementedBy>strongswan</implementedBy>
                        <type>encrypted tunnel</type>
                    </application_filter>
                </traffic_filter>
           </access_control>
            <HSPL_capability>
                <capability_list>Protection_confidentiality</capability_list>
                <capability_list>Protection_integrity</capability_list>
                <capability_list>IPSec_protocol</capability_list>
            </HSPL_capability>
        </capability>
        <M2L_translation_info>
            <security_control>
                <id>corporate-vpn</id>
                <name>Secured tunnel</name>
                <description>This plugin converts MSPL to IPSec configuration</description>
                <plugin>
                    <id>corporate-vpn_M2L_plugin</id>
                    <name>Corporate VPN M2LPlugin</name>
                    <URL>http://195.235.93.146:8080/v1/PSA/M2Lplugins/PSA-corporate-vpn</URL>
                    <command>none</command>
                </plugin>
                <configuration_file>corporate-vpn_M2L_plugin.jar</configuration_file>
            </security_control>
        </M2L_translation_info>
        <performance>
            <network_throughput unit="Mbit/s">
                <value>10</value>
            </network_throughput>
            <simultaneous_connections unit="conn/s">
                <value>10</value>
            </simultaneous_connections>
            <max_numer_of_operations_rules>2</max_numer_of_operations_rules>
            <max_numer_of_users>10</max_numer_of_users>
        </performance>
    <optimization_parameter cost="1.0" latency="1.0" rating="1.0" />
    </functionality>
    <execution_model>
        <infrastructure>
            <hw_requirement>
                <cpu_unit>1</cpu_unit>
                <cpu_architecture>x86_64</cpu_architecture>
                <cpu_family>Intel</cpu_family>
                <RAM_size unit="GB">
                    <value>1</value>
                </RAM_size>
                <disk_size unit="GB">
                    <value>2</value>
                </disk_size>
                <bandwidth unit="Mbit/s">
                    <value>10</value>
                </bandwidth>
                <max_delay unit="ms">
                    <value>2000</value>
                </max_delay>
            </hw_requirement>
            <sw_requirement>
                <OS_type>Debian</OS_type>
                <OS_version>7.0</OS_version>
                <OS_architecture>x86_64</OS_architecture>
            </sw_requirement>
        </infrastructure>
        <security_availability/>
        <mobility>
            <migration_support>cold migration</migration_support>
            <type>stateless</type>
        </mobility>
        <PSC_dependency/>
        <additional_requirement/>
    </execution_model>
    <configuration>
        <PSA_format>img</PSA_format>
        <security_control_configuration>
            <security_control_ID>corporate-vpn_M2L_plugin</security_control_ID>
            <configuration_file>corporate-vpn_M2L_plugin.jar</configuration_file>
            <executable>java</executable>
        </security_control_configuration>
        <network_card_no>1</network_card_no>
        <network_card_configuration>
            <card_ID>eth0</card_ID>
            <MAC_address>00:00:00:00:00:00</MAC_address>
            <IP_address>1.1.1.1</IP_address>
            <netmask>255.255.255.0</netmask>
        </network_card_configuration>
        <network_card_configuration>
            <card_ID>eth1</card_ID>
            <MAC_address>00:00:00:00:00:01</MAC_address>
            <IP_address>192.168.1.1</IP_address>
            <netmask>255.255.255.0</netmask>
        </network_card_configuration>
        <network_configuration>
            <gateway_IP_address>1.1.1.250</gateway_IP_address>
            <DNS_IP_address>8.8.8.8</DNS_IP_address>
        </network_configuration>
        <kernel_configuration/>
    </configuration>
    <monitoring>
        <input_bandwidth unit="Kbit/s">
            <value>100</value>
        </input_bandwidth>
        <output_bandwidth unit="Kbit/s">
            <value>10</value>
        </output_bandwidth>
        <delay unit="ms">
            <value>10</value>
        </delay>
    </monitoring>
</PSAManifest>