WireGuard: next generation in-kernel modern VPN

Re:WireGuard: next generation in-kernel modern VPN by lobster_johnson on Tuesday June 28, 2016 @02:58PM (#11996480)

> In kernel VPN is giving me a bit of a security heart attack.

You may be surprised, then, that most of the standard VPN tech — IPsec, GRE+PPTP, VxLAN, etc. — operate in the kernel (with some help from userland apps for things like IKE).

[ Parent | on HN ]

Re:WireGuard: next generation in-kernel modern VPN by artie_effim on Tuesday June 28, 2016 @03:31PM (#11996787)

sorry - aren't those all protocols and not applications?

[ Parent | on HN ]

Re:WireGuard: next generation in-kernel modern VPN by lobster_johnson on Tuesday June 28, 2016 @03:41PM (#11996878)

I'm referring to Linux, where the implementations of those protocols are kernel modules. There are user-space implementations, of course, such as Rockhopper (IPsec). But they're not performant.

[ Parent | on HN ]