connections {

  host-host {
    local_addrs  = PH_IP_SUN
    remote_addrs = PH_IP_MOON

    proposals = aes256-sha512-modp4096

    local {
      auth = pubkey
      certs = sunCert.pem
      id = sun.strongswan.org
    }
    remote {
      auth = pubkey
      id = moon.strongswan.org
    }
    children {
      host-host {
        life_time=10s
        rekey_time=4s
        rand_time=0
        mode = transport
        esp_proposals = aes256-sha512-modp4096
      }
    }
  }
}
