Virtual Network Interface registration with nRF91 offloaded socket

[Zoltan Ban]

Hi,

We are thinking about bringing VPN into our network on the device level. It would make sense to implement it on the network interface layer of the network stack.
My question is, it is possible to register a virtual network interface while using the nRF9160 modem? It does not use the native Zephyr socket but an offloaded one which is implemented by the Nordic team. Could that work in theory?

[helsing]

Hi Zoltan, I will be replying while Charlie is out of office.

Zoltan Ban said:

So I can not register a Zephyr virtual network interface while I am using the Nordic offloaded socket.

No, this is not supported.

Have you checked with your provider regarding available APN types (like a dedicated private APN)?

Best regards,

Håkon

[Zoltan Ban]

Thank you for answering Helsing. Having a private APN is not as secure as having a VPN embedded in our edge device.
Can I ask why is it not supported? Is there any specific reason for it?

[helsing]

Zoltan Ban said:

Having a private APN is not as secure as having a VPN embedded in our edge device.
Can I ask why is it not supported? Is there any specific reason for it?

We have currently no plans for IPSec. We have not really seen the demand for it, and it would require considerable resources to implement. It will also have a significant impact on memory consumption as well as performance in the cellular domain.

If this is an important feature to you please mention it to your local Nordic sales representative (RSD)