Skip to content

Commit bcefd6e

Browse files
committed
fix(s2svpn): pierre feedback
1 parent b6886b5 commit bcefd6e

File tree

7 files changed

+7
-5
lines changed

7 files changed

+7
-5
lines changed
3.82 KB
Loading
2.08 KB
Loading
2.14 KB
Loading
54 Bytes
Loading
2.14 KB
Loading

pages/site-to-site-vpn/reference-content/security-proposals.mdx

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -91,8 +91,10 @@ Key exchange is **D**iffie-**H**ellman-based. The following DH groups can be set
9191
| `modp3072` | 3072 | ✅ Medium-Strong | May be suitable for legacy VPNs. |👍 Acceptable |
9292
| `modp2048` | 2048 | ⚠️ Minimum | Use for older VPNs only if absolutely needed |⚠️ Use with caution |
9393

94+
## Standard recommendation
9495

96+
For standard usage on modern equipment we recommend the following security proposal:
9597

96-
97-
98-
98+
| IKEv2 Encryption | IKEv2 Integrity | IKEv2 Key Exchange | ESP Encryption | ESP Integrity | ESP Key Exchange |
99+
|------------------|-----------------|--------------------|----------------|---------------|------------------|
100+
| `aes256gcm16` | not required | `curve25519` | `aes256gcm16` | not required | not required |

pages/site-to-site-vpn/reference-content/understanding-s2svpn.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,10 +42,10 @@ You must create all of the above elements, and correctly configure your customer
4242
The VPN gateway provides a connection point on the Scaleway side of a Site-to-Site VPN tunnel. It has the following properties, which you can customize when you create the gateway:
4343

4444
- **Region**: The geographical location in which the gateway is created. It must be in the same region as the other Site-to-Site VPN resources (customer gateways, routing policies, connections) that you want to use it with.
45-
- **Name** and (optioanlly) **tags**: A name and tags to identify the gateway.
45+
- **Name** and (optionally) **tags**: A name and tags to identify the gateway.
4646
- **Gateway type**: Different gateway types are available for different prices. Pricing is based on **bandwidth**, and the **maximum number of connections** the gateway can be used for.
4747
- **Private Network**: Each gateway must be attached to a single Scaleway Private Network. The network chosen cannot be modified after creation of the gateway. The gateway will get both an IPv4 and IPv6 address on the Private Network. Other Private Networks in the VPC will be able to learn the route through the VPN gateway.
48-
- **Public IP address(es)**: The address(s) used to establish the VPN tunnel. Maximum of one IPv4 /32 and one IPv6 /128 address per gateway. Gateways with both types of IP will be able to support dual tunnels for a single connection, one IPv4 and one IPv6, providing increased redundancy.
48+
- **Public IP address(es)**: The address(es) used to establish the VPN tunnel. Maximum of one IPv4 /32 and one IPv6 /128 address per gateway. Gateways with both types of IP will be able to support dual tunnels for a single connection, one IPv4 and one IPv6, providing increased redundancy.
4949

5050
### Customer gateway
5151

0 commit comments

Comments
 (0)