openswan比strongswan好在哪里

ncxsx

很迷惑，根据strongswan网站的比较列表（http://www.strongswan.org/index.htm），openswan的功能并不比strongswan好，而且两者也都是基于freeswan-2.04的，稳定性也应该差不多，为什么反而用openswan的人更多呢？请有经验的前辈指点一下。

ncxsx

找到一点信息，供大家参考，希望高手能再说说：
I really don't like the split into openswan and strongswan and, in my role as the Debian maintainer of freeswan, already contacted both teams and tried to get them to unify again. No chance, not even a reaction to my email. Currently, the advantages of strongswan over openswan are: newer X.509 patch with OCSP (it's clear why) and the alg patch. The former is being worked on (X.509 is in the openswan patch queue) and latter is at least partially dealt with by the development tree (not in the KLIPS code, but for the native IPSec stack). I have been asked to also maintain strongswan. Besides the alg patch, I currently don't really see a reason for doing it. If some feature that is present in strongswan is needed, in my opinion it would be better to have it ported to openswan than to have both, which are very similar.

ncxsx

嗯，看来是我的问题比较弱。

harriszz

个人感觉：
strongswan 偏重理论东东
openswan 偏重应用

就实际使用而言，openswan应该比strongswan好吧