Network & Email · page 15

Generates wg-quick interface files for peers from inputs.

Tracks peer keys, endpoints, and rotation dates in a ledger.

Plans AllowedIPs versus kernel routing table per peer.

Computes per-packet WireGuard overhead for MTU planning.

Plans hub forwarding and spoke peer tables for a WG mesh.

Plans IKE proposals across DH groups, ciphers, and lifetimes.

Plans ESP transforms, PFS groups, and traffic selectors.

Generates strongSwan ipsec.conf or swanctl snippets from intents.

Computes ESP, AH, and NAT-T overhead per packet for MTU.

Plans VTI interfaces, addressing, and routing per tunnel.

Plans GRE keys, MTU, and recursive routing guards.

Plans GRE protection with IPsec crypto maps or profiles.

Plans MOBIKE and DPD timers for mobile client continuity.

Explains when NAT-T engages across UDP 500 and 4500 flows.

Plans included and excluded route lists for VPN clients.

Compares WireGuard, IPsec, OpenVPN, and SSL-VPN overhead tables.

Plans dead-peer detection intervals and hold times per tunnel class.

Builds -L local forward commands from service intents.

Builds -R reverse forward commands for inbound access.

Builds -J jump host chains for nested targets.

Generates proxychains chain syntax for SOCKS and HTTP hops.

Emits a proxy auto-config script from CIDR and domain rules.

Checks wpad DNS and DHCP discovery steps with hijack warnings.

Builds bypass strings for OS and browser proxy settings.