openstack/neutron-vpnaas — Week of 2026-08-15

IPsec driver consolidation. The dominant story is the retirement of the OpenSwan backend and the untangling of LibreSwan from it: the OpenSwan driver implementation was deleted outright (999832, ~1,290 lines removed), and LibreSwan was decoupled into a standalone implementation of its own (~560 lines). Supporting that split, libreswan_opts is now registered in the config sample generator, and a new functional test suite for LibreSwan lands alongside a Zuul job exercising OVN VPNaaS tempest with LibreSwan.

OVN VPN agent. Several fixes tighten the OVN agent's startup path: the sb_cfg key is now initialized at agent startup, device driver loading is deferred to start() in the RPC layer, empty OVN process subclasses are removed, and backwards compatibility with OVN older than v20.09 is dropped.

Cleanup. A misleading os.path.join() on an absolute path is corrected; dead code (add_ipsec_connection, TEMPLATE_PATH) and unused debtcollector / oslo.serialization dependencies are pruned; and tests move from load_tests to stestr regex filtering.