WireGuard: Next Generation Secure Kernel Network Tunnel

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by dguido on Sunday February 05, 2017 @01:10AM (#13571184)

If you want a reliable VPN you can use today on nearly every platform, try Algo VPN. It uses simplifies using IPSEC so that anyone who can run a few command line scripts can use it.

https://github.com/trailofbits/algo

It's great that someone is working on what comes next after IPSEC, but the platform support for everyone won't come any time soon. If you need a VPN today, Algo is your best answer.

[ Parent | on HN ]

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by tptacek on Sunday February 05, 2017 @12:31PM (#13573390)

I like Algo a lot, but find it approximately as hard to recommend an IPSEC head-end to a sensitive network as I do recommending OpenVPN, and OpenVPN has better clients. Algo makes sense to me as the kind of VPN I set up to run traffic through when I travel, but not for protecting networks.

I'm not convinced that the problem of replacing VPN protocols is so difficult that we should get comfortable with IPSEC. We're really just an OSX client away from WireGuard in the mainstream. And unlike IPSEC vs. OpenVPN, WG is clearly better than the alternative.

[ Parent | on HN ]

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by dguido on Saturday February 11, 2017 @01:06PM (#13623803)

I'll add WireGuard when it gets better client support. I'm not tied to IPSEC.

The core values of Algo are making self-hosting and initial setup easy and reliable.

[ Parent | on HN ]

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by MohammadLee on Sunday February 05, 2017 @01:41AM (#13571263)

Algo looks good if you stick to IPSEC but WireGuard is years ahead, and much sounder. Considering WireGuard's promising start, imo it's OK if platform support isn't broad yet. You don't need Solaris support to start having your state-of-the art VPN between your servers and workstations.

[ Parent | on HN ]

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by xorcist on Sunday February 05, 2017 @05:08AM (#13571693)

Another good alternative to IPsec is OpenVPN. It's called a "TLS VPN" but really, it simplifies TLS a lot and doesn't use many of the complicated parts of the protocol. It's much more sane than I had expected, and likely easier to secure than IPsec.

I've recently started recommending it for a everyone who doesn't have IPsec hardware, something I should have done long ago (but I mistakenly thought it to be less thought out than it was). Android support is solid too.

[ Parent | on HN ]

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by popey456963 on Sunday February 05, 2017 @06:48AM (#13571953)

If you're looking to install OpenVPN, can I suggest you use the following bash file?

> https://github.com/Nyr/openvpn-install

It automates the process of installing & creating OpenVPN, and means so that anyone who can download a file & run a bash file will be able to make a VPN.

[ Parent | on HN ]

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by sandGorgon on Sunday February 05, 2017 @03:06AM (#13571432)

What is a good hosted ipsec vpn? also is there built in support for networkmanager?

[ Parent | on HN ]

Re:WireGuard: Next Generation Secure Kernel Network Tunnel by dguido on Saturday February 11, 2017 @01:07PM (#13623813)

The entire point of Algo is to avoid using a hosted VPN because they're awesomely insecure. More here:

https://gist.github.com/kennwhite/1f3bc4d889b02b35d8aa

https://gist.github.com/joepie91/5a9909939e6ce7d09e29

[ Parent | on HN ]