libreswan configurations for AWS VPC endpoints

gistfile1.txt

# /etc/ipsec.d/eastwest.conf - left-hand configuration (endpoint to 10.0.0.0/16)
conn eastwest
    # we use %defaultroute below so we don't need to specify the instance's internal IP address,
    # which may change if the instance is stopped/started
    left=%defaultroute
    # This host's Elastic IP address (what we advertise ourselves to "right" as)
    leftid=52.27.234.11
    leftsubnet=10.0.0.0/16
    leftrsasigkey=...
    # gateway address for 10.1.0.0/16 ("right's" Elastic IP address)
    right=52.87.208.247
    rightsubnet=10.1.0.0/16
    rightrsasigkey=...
    authby=rsasig
    ike=aes256-sha256-modp2048
    esp=aes256-sha256
    # load and initiate automatically
    auto=start


# /etc/ipsec.d/eastwest.conf - right-hand configuration (endpoint to 10.1.0.0/16)
conn eastwest
    # gateway address for 10.0.0.0/16 ("left's" Elastic IP address)
    left=52.27.234.11
    leftsubnet=10.0.0.0/16
    leftrsasigkey=...
    # we use %defaultroute below so we don't need to specify the instance's internal IP address,
    # which may change if the instance is stopped/started
    right=%defaultroute
    # This host's Elastic IP address (what we advertise ourselves to "left" as)
    rightid=52.87.208.247
    rightsubnet=10.1.0.0/16
    rightrsasigkey=...
    authby=rsasig
    ike=aes256-sha256-modp2048
    esp=aes256-sha256
    # load and initiate automatically
    auto=start