News for hackers. Stuff that matters.
Re:WireGuard: fast, modern, secure VPN tunnel by atonse on Wednesday February 07, 2018 @04:36PM (#16328233)
OpenVPN is easier to setup than what exactly?

I found OpenVPN to just feel VERY VERY clunky. The clients look ugly and unpolished. Before anyone says that's superficial, I do think it shows a lack of attention to detail. Setting up the server also wasn't terribly easy (it wasn't too hard either for someone like me who's used Linux for many years).

I think most of OpenVPN's value has come from the fact that it's the last difficult of solutions to implement.

For the record, I wasn't claiming that WireGuard was this easy to setup. But I think the mentality of WireGuard is simplicity. I think it's only a matter of time before someone DOES implement a single click client/server with it.

Right now I use Algo, which is just an excellent set of scripts used to setup VPN servers. This way I don't have to use OpenVPN, and I can actually use IPSec with built-in OS clients.

Update: Also I'd like to add that WireGuard just feels like the kind of thing Apple would've implemented in their OS 10 years ago. But Apple today wouldn't. They just seem to be barely treading water in their MacOS group.

Re:WireGuard: fast, modern, secure VPN tunnel by vbezhenar on Wednesday February 07, 2018 @05:01PM (#16328413)
> OpenVPN is easier to setup than what exactly?

Definitely it was easier than strongswan for me. Documentation is clear, a lot of guides, AFAIK there's a single implementation, so no interoperation quirks, logging is actually useful. Client setup is a single .ovpn file which contains everything and installed using double-click or similar method. I guess that setting up a custom CA is the hardest part of setup and I just happen to work a lot with certificates, so it wasn't hard for me, everything else is as easy as any server software.

> I found OpenVPN to just feel VERY VERY clunky. The clients look ugly and unpolished.

I used paid software (Viscosity) for macOS, it was quite good IMO. I used official software for iOS, it worked without any problems. I'm not really sure what's ugly about VPN client, it's systems software, it should display icon in tray and allow to connect/disconnect, that's all. I remember that my friend had issues with OpenVPN official client on Windows laptop with hibernate, but I think he just had to restart connection, not that big of an issue.

> For the record, I wasn't claiming that WireGuard was this easy to setup. But I think the mentality of WireGuard is simplicity. I think it's only a matter of time before someone DOES implement a single click client/server with it. Right now I use Algo, which is just an excellent set of scripts used to setup VPN servers. This way I don't have to use OpenVPN, and I can actually use IPSec with built-in OS clients.

While I won't use any "single click" solutions unless I made them personally, I saw scripts which claim to install OpenVPN or IPsec automatically with absolutely minimal interaction. They had a lot of stars, so I guess they works. But if there's something that Wireguard could do better, that's good. It's still too hard for non-technical user to buy cheap VPS and setup his personal VPN with adequate security.

Re:WireGuard: fast, modern, secure VPN tunnel by ComputerGuru on Thursday February 08, 2018 @12:36AM (#16330443)
> The clients look ugly and unpolished.

Check out Viscosity. I've been a user for a few years now, it’s great stuff.

Re:WireGuard: fast, modern, secure VPN tunnel by subliminalpanda on Monday February 12, 2018 @12:00PM (#16359947)
Seconded, it's a great client and the support from the devs is good.
Re:WireGuard: fast, modern, secure VPN tunnel by atmosx on Thursday February 15, 2018 @03:00PM (#16387051)
Viscosity looks nice, has advanced features and can be scripted with AppleScript.
Re:WireGuard: fast, modern, secure VPN tunnel by cdancette on Wednesday February 07, 2018 @04:39PM (#16328261)
Some openvpn providers just give you a conf file that you import in your client, and that's all you need
Re:WireGuard: fast, modern, secure VPN tunnel by iamnotlarry on Thursday February 08, 2018 @01:04AM (#16330523)
You could do the same with wireguard, only the conf file would be about 6 lines of text. And you can understand the obvious purpose of each line.