ADR044: Remove IPSec
GOV.UK PaaS uses mutual TLS via routing-release between gorouter and apps. This is a form of end-to-end encryption.
GOV.UK PaaS uses IPSec between gorouter and diego cells (which run apps). This is a form of end-to-end encryption.
The cf-dev mailing list alleges that the IPSec release is no longer maintained.
We will not run IPSec in our BOSH deployments.
End-to-end encryption between gorouter and apps will done solely by mTLS.