openvpn and system overhead

[Eugene Grosbein]

On 22.04.2019 22:32, Wojciech Puchar wrote:
>>> well it has to cooperate with multitude of clients like windoze,
>>> point&click routers etc. that's why openvpn.
>>
>> Windows has stock support for IPSec with and without L2TP and has no stock openvpn, so IPSec is more preferable.
> 
> can IPSEC VPN work over nat? even freebsd-freebsd case.
> 
> I cannot find any tutorial how to do this.

FreeBSD 11.1 and later supports IPSec NAT Traversal out-of-the-box.