StrongSwan

Sort of a continuation of the last post. This still uses FreeBSD, pfSense, Juniper SRX but it could fairly easily be adapted to OpnSense (fork/clone of pfSense), and other network vendor appliances.