Learn how to build a resilient IPsec Site-to-Site VPN between Linux and an AWS VPC using strongSwan and BGP. This guide covers route-based VTI configuration, FRRouting peering, dual-tunnel active/standby failover, and TCP MSS clamping.