Upload 4 files

Dockerfile

@@ -0,0 +1,22 @@
+# Use a lightweight Python base image
+FROM python:3.11-slim
+
+# Set the working directory
+WORKDIR /app
+
+# Install the pvpn library
+RUN pip install pvpn
+
+# Copy the server script into the container
+COPY ikev2_server_pure_python.py .
+
+# Expose the standard IKEv2 ports (UDP 500 and 4500)
+# Note: The 'pvpn' server runs as root inside the container to bind to these ports,
+# but the container is run by a non-root user on the host.
+EXPOSE 500/udp
+EXPOSE 4500/udp
+
+# Command to run the server script
+# We use 'python3' instead of 'sudo python3' because the container runs as root by default,
+# which is necessary to bind to the privileged ports 500 and 4500.
+CMD ["python3", "ikev2_server_pure_python.py"]

docker-compose.yml

@@ -0,0 +1,15 @@
+version: '3.8'
+services:
+  ikev2_server:
+    build: .
+    container_name: pure_python_ikev2_server
+    # The server needs to listen on UDP ports 500 and 4500
+    ports:
+      - "500:500/udp"
+      - "4500:4500/udp"
+    # To handle IPsec/VPN traffic, the container often needs to run in 
+    # privileged mode and/or with NET_ADMIN capability.
+    # This is a common requirement for VPN servers in containers.
+    cap_add:
+      - NET_ADMIN
+    restart: always

ikev2_server_pure_python.py

@@ -0,0 +1,71 @@
+import sys
+import logging
+import argparse
+from pvpn.server import main
+
+# Configure basic logging
+logging.basicConfig(level=logging.INFO, stream=sys.stdout,
+                    format='%(asctime)s - %(levelname)s - %(message)s')
+
+def start_ikev2_server_programmatically():
+    """
+    Demonstrates how to start a pure Python IKEv2 server using the pvpn library.
+    
+    NOTE ON PORT BINDING:
+    IKEv2 requires binding to UDP ports 500 and 4500. On Linux, these are
+    privileged ports (<1024), and binding requires root (sudo) permissions
+    or special capabilities.
+    
+    This script will likely fail with a PermissionError (Errno 13) unless run
+    with sudo, which is outside the scope of a pure Python solution in a 
+    standard user environment.
+    
+    However, the core IKEv2 protocol and IPsec data plane logic are implemented
+    in pure Python by the 'pvpn' library, fulfilling the user's request for 
+    a solution *without* reliance on native Linux configurations (like XFRM).
+    """
+    
+    # We will use the CLI entry point function 'main' and inject arguments 
+    # into sys.argv, as the library is designed for command-line use.
+    
+    # The default ports (500/4500) are hardcoded in the library and cannot be
+    # easily changed without modifying the source code.
+    
+    # Arguments:
+    # -p: Pre-shared key (PSK) for IKEv2 authentication
+    # -l: Listen address (0.0.0.0 for all interfaces)
+    
+    # Preserve original arguments to restore later
+    original_argv = sys.argv
+    
+    # Set arguments for the pvpn server
+    sys.argv = [
+        "pvpn", 
+        "-p", "MySecretPSK123",  # The Pre-Shared Key
+        # The library will automatically listen on 0.0.0.0:500 and 0.0.0.0:4500
+    ]
+    
+    print("Attempting to start pure Python IKEv2 VPN server...")
+    print("PSK: MySecretPSK123")
+    print("Listening on UDP ports 500 and 4500 (requires root/sudo on Linux).")
+    
+    try:
+        # The main function runs the asyncio loop and the server indefinitely
+        main()
+    except PermissionError as e:
+        print("\n--- ERROR ---")
+        print(f"Failed to start server due to PermissionError: {e}")
+        print("This is expected in a standard user environment, as ports 500/4500 are privileged.")
+        print("The underlying IKEv2 implementation is pure Python, but the OS requires root for port binding.")
+        print("To run this successfully, execute the script with 'sudo python3 ikev2_server_pure_python.py'.")
+        print("-------------")
+    except KeyboardInterrupt:
+        print("\nServer stopped by user.")
+    except Exception as e:
+        print(f"An unexpected error occurred: {e}")
+    finally:
+        # Restore sys.argv
+        sys.argv = original_argv
+
+if __name__ == '__main__':
+    start_ikev2_server_programmatically()

server.py

@@ -0,0 +1,7 @@
+import asyncio
+from pvpn.server import main
+import sys
+
+if __name__ == "__main__":
+    sys.argv = ["pvpn", "-p", "testpsk123"]
+    main()