We absolutely do offer IPsec support! This will run fine on our VPS plans out-the-box.
If you install IPSec, for example, using apt install strongswan -y and then run systemctl status ipsec you may find the service is inactive, with errors reported, like so:
root@test:~# systemctl status ipsec
○ strongswan-starter.service - strongSwan IPsec IKEv1/IKEv2 daemon using ipsec.conf
Loaded: loaded (/lib/systemd/system/strongswan-starter.service; enabled; preset: enabled)
Active: inactive (dead) since Tue 2024-09-17 16:05:20 BST; 47s ago
Duration: 22ms
Process: 723 ExecStart=/usr/sbin/ipsec start --nofork (code=exited, status=0/SUCCESS)
Main PID: 723 (code=exited, status=0/SUCCESS)
Sep 17 16:05:20 test.test.com ipsec[727]: 00[CFG] loading secrets from '/etc/ipsec.secrets'
Sep 17 16:05:20 test.test.com ipsec[727]: 00[LIB] failed to load 2 critical plugin features
Sep 17 16:05:20 test.test.com ipsec[727]: 00[DMN] initialization failed - aborting charon
Sep 17 16:05:20 test.test.com ipsec[723]: charon has quit: initialization failed
Sep 17 16:05:20 test.test.com ipsec[723]: charon refused to be started
Sep 17 16:05:20 test.test.com ipsec[723]: ipsec starter stopped
Sep 17 16:05:20 test.test.com ipsec_starter[723]: charon has quit: initialization failed
Sep 17 16:05:20 test.test.com ipsec_starter[723]: charon refused to be started
Sep 17 16:05:20 test.test.com ipsec_starter[723]: ipsec starter stopped
Sep 17 16:05:20 test.test.com systemd[1]: strongswan-starter.service: Deactivated successfully.
root@test:~#
Simply run the command systemctl start strongswan-starter.service to bring the service online, and all will be well:
root@test:~# systemctl status ipsec
○ strongswan-starter.service - strongSwan IPsec IKEv1/IKEv2 daemon using ipsec.conf
Loaded: loaded (/lib/systemd/system/strongswan-starter.service; enabled; preset: enabled)
Active: active (running) since Tue 2024-09-17 16:26:07 BST; 1s ago
Main PID: 759 (starter)
CGroup: /system.slice/strongswan-starter.service
├─759 /usr/lib/ipsec/starter --daemon charon --nofork
└─763 /usr/lib/ipsec/charon
Sep 17 16:26:07 test.test.com charon[763]: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
Sep 17 16:26:07 test.test.com charon[763]: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
Sep 17 16:26:07 test.test.com charon[763]: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
Sep 17 16:26:07 test.test.com charon[763]: 00[CFG] loading crls from '/etc/ipsec.d/crls'
Sep 17 16:26:07 test.test.com charon[763]: 00[CFG] loading secrets from '/etc/ipsec.secrets'
Sep 17 16:26:07 test.test.com charon[763]: 00[LIB] loaded plugins: charon aesni aes rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs12 pgp dnskey sshkey pem openssl pkcs8 fips-prf gmp agent xcbc hm>
Sep 17 16:26:07 test.test.com charon[763]: 00[LIB] dropped capabilities, running as uid 0, gid 0
Sep 17 16:26:07 test.test.com charon[763]: 00[JOB] spawning 16 worker threads
Sep 17 16:26:07 test.test.com ipsec[759]: charon (763) started after 20 ms
Sep 17 16:26:07 test.test.com ipsec_starter[759]: charon (763) started after 20 ms
