Virtual Network Interface registration with nRF91 offloaded socket

RE: Virtual Network Interface registration with nRF91 offloaded socket

helsing — Tue, 24 Oct 2023 13:31:29 GMT

[quote user="Zoltan Ban"]Having a private APN is not as secure as having a VPN embedded in our edge device.
Can I ask why is it not supported? Is there any specific reason for it?[/quote]

We have currently no plans for IPSec. We have not really seen the demand for it, and it would require considerable resources to implement. It will also have a significant impact on memory consumption as well as performance in the cellular domain.

If this is an important feature to you please mention it to your local Nordic sales representative (RSD)

RE: Virtual Network Interface registration with nRF91 offloaded socket

Zoltan Ban — Thu, 19 Oct 2023 08:38:04 GMT

Thank you for answering Helsing. Having a private APN is not as secure as having a VPN embedded in our edge device.
Can I ask why is it not supported? Is there any specific reason for it?

RE: Virtual Network Interface registration with nRF91 offloaded socket

helsing — Wed, 18 Oct 2023 13:52:45 GMT

Hi Zoltan, I will be replying while Charlie is out of office.

[quote user="Zoltan Ban"]So I can not register a Zephyr virtual network interface while I am using the Nordic offloaded socket. [/quote]

No, this is not supported.

Have you checked with your provider regarding available APN types (like a dedicated private APN)?

Best regards,

Håkon

RE: Virtual Network Interface registration with nRF91 offloaded socket

Zoltan Ban — Fri, 13 Oct 2023 14:43:43 GMT

So I can not register a Zephyr virtual network interface while I am using the Nordic offloaded socket. Is that right?

RE: Virtual Network Interface registration with nRF91 offloaded socket

Charlie — Thu, 12 Oct 2023 11:02:05 GMT

Hi Zoltan,

nRF9160 Modem does not support IPSec on the network interface layer.
You may implement an SSL VPN client or use a private APN from a supported carrier. (+) nRF9160 Private APN - Nordic Q&A - Nordic DevZone - Nordic DevZone (nordicsemi.com)

Best regards,

Charlie