[ANNOUNCE] LuCI App for IPsec (Libreswan): Web User Interface for Site-to-Site VPN Administration

Hello everyone,

I'm happy to introduce a newly released LuCI application for IPsec VPN tunnel management on OpenWrt that was created specifically for IPsec-based Libreswan devices.

:link: GitHub Repository:
https://github.com/jigarladhava/OpenWrtLuCI_IPSEC_AG-702

This project offers a complete web interface that eliminates the need to manually edit configuration files in order to create, monitor, and manage IPsec Site-to-Site tunnels. Although the code is modular and can be modified for any OpenWrt build that supports Libreswan, it is presently tested on Atreyo AG-702 platform.


:sparkles: Key Features

  • LuCI interface for IPsec (Libreswan)
  • Configure IKE Phase-1 & Phase-2 parameters
  • DPD (Dead Peer Detection) support
  • Automatic tunnel health monitoring with reconnect logic
  • Real-time status and logs view
  • Firewall/NAT integration for secured routing
  • Multi-tunnel configuration support
  • UCI-based backend for safe and consistent configs

For industrial, ISP, and enterprise settings where stable tunnel monitoring is crucial, this package attempts to simplify and improve IPsec configuration.


:pushpin: For whom is it intended?

  • Anyone utilizing OpenWrt with Libreswan IPsec
  • Integrators who require a graphical user interface (GUI) rather than manually editing /etc/ipsec.conf
  • Network engineers overseeing site-to-site VPNs
  • Developers creating custom OpenWrt firmware
  • Users requiring automatic reconnect + DPD health logic

:hammer_and_wrench: Contributions & Development

Feedback, issue reports, and comments are all greatly appreciated!
Please let me know if you test this app on different hardware targets or OpenWrt versions so I can make it more compatible.


I'd love to hear your opinions, test findings, and suggestions for making the app better.
We appreciate the encouragement and support from the OpenWrt community!

2 Likes

Just from 10'000 ft above sea level, this seems to lean heavily on lua, which is going away (no new luci-apps depending on lua are going to be accepted, lua bindings for luci will be removed in the not so distant future), so I fear this won't work all that long.

Thanks for the feedback. I will be migrating the UI to the newer JS-based LuCI framework so it remains compatible with future OpenWrt versions, in such case.

Hi,

I've managed to install on Cudy WR3000H v1, have to make some test after the weekend.

Hi,
Can you please DM me,Need more details and logs. I will get it rectified .