Do you think Tor should be run over IPsec, or IPsec over Tor? Please be specific as of why you made this decision.
migrated from stackoverflow.com May 9 '10 at 7:04
As far as I understand from the Tor page: my first question is what is the relation between Tor and IPSEC?
Secondly, Tor is just for instead of taking a direct route from source to destination, data packets on the Tor network take a random pathway through several relays that cover your tracks so no observer at any single point can tell where the data came from or where it's going.
It also states that to create a private network pathway with Tor, the user's software or client incrementally builds a circuit of encrypted connections through relays on the network.
When I look in this perspective, Tor is just changing the IP addresses from source to destination and IP address as you may know are in the network layer, so IPSEC is in-between the datalink layer and network layer.
I guess that you can run IPsec over IP over HTTP over TOR. If you really want.
The hack is IP over HTTP. There seems to be e.g. http://www.nocrew.org/software/httptunnel.html
I have not tried.