IP Security for Linux (IPSec)

["seifried" <seifried seifried org>]

I've kept this one on the back burner for a while, waiting for it to 
mature before attempting to use it, and now having seen OpenBSD
ship with IPSec I'm getting a bit impatient =).

What is the status of IPSec for Linux (and more specifically RedHat)?

By this I mean I just did some www browsing/etc and found about a
half dozen different implimentations, ranging from NRL, to a nist 
patch for RedHat 5.1, swan, ipnsec, etc, etc.

Does RedHat have any official word on this? I know including IPSec
would be a pain in the butt, being that they are in the US (OpenBSD
moved their official head end distribution site to the local university, 
cared for by the guy who is also head of the local LUG... go fig).

I'm going to be experiementing with the various IPSec packages for 
Linux (specifically under RedHat 5.1) and will post any positive results
back to the list, I would also appreciate anyone else who has 
experiemented with IPSec under Linux to do likewise. It's rather simplistic
to say but basically true that using IPSec would solve many many security
problems and risks that we currently suffer (have you ever tried 
implimenting kerberoes? not fun).

-seifried