All tools · page 192

Plans hub forwarding and spoke peer tables for a WG mesh.

Plans IKE proposals across DH groups, ciphers, and lifetimes.

Plans ESP transforms, PFS groups, and traffic selectors.

Generates strongSwan ipsec.conf or swanctl snippets from intents.

Computes ESP, AH, and NAT-T overhead per packet for MTU.

Plans VTI interfaces, addressing, and routing per tunnel.

Plans GRE keys, MTU, and recursive routing guards.

Plans GRE protection with IPsec crypto maps or profiles.

Plans MOBIKE and DPD timers for mobile client continuity.

Explains when NAT-T engages across UDP 500 and 4500 flows.

Plans included and excluded route lists for VPN clients.

Compares WireGuard, IPsec, OpenVPN, and SSL-VPN overhead tables.

Plans dead-peer detection intervals and hold times per tunnel class.

Builds -L local forward commands from service intents.

Builds -R reverse forward commands for inbound access.

Builds -J jump host chains for nested targets.

Generates proxychains chain syntax for SOCKS and HTTP hops.

Emits a proxy auto-config script from CIDR and domain rules.

Checks wpad DNS and DHCP discovery steps with hijack warnings.

Builds bypass strings for OS and browser proxy settings.

Formats http_proxy, HTTPS_PROXY, and NO_PROXY values correctly.

Plans overlay addressing and gateway nodes for mesh deployments.

Plans rekey lifetimes and margins to avoid simultaneous rekeys.

Plans FQDN versus IP identities and PSK mapping per peer.