Re:WireGuard is submitted for Linux kernel inclusion
by ofrzeta on Wednesday August 01, 2018 @04:05AM
(#17660457)
Great news. I started using Wireguard instead of OpenVPN and won't look back. Actually it was easy to set up even with DKMS kernel modules but having it in mainline will be great.
[ Parent
| on HN ]
Re:WireGuard is submitted for Linux kernel inclusion
by simias on Wednesday August 01, 2018 @05:32AM
(#17660918)
Can you explain what makes it better than venerable old OpenVPN?
Re:WireGuard is submitted for Linux kernel inclusion
by phaer on Wednesday August 01, 2018 @05:42AM
(#17660991)
Mostly speed, a more minimal configuration syntax, more modern crypto.
OpenVPN works fine, is quite portable and runs in user space. It's quite a lot slower, but is well-tested and can be managed with a Certificate Authority in organisation where that's desired.
Re:WireGuard is submitted for Linux kernel inclusion
by cm2187 on Wednesday August 01, 2018 @08:28AM
(#17661848)
I presume speed on linux? Otherwise doesn't wireguard suffer from the same peformance drawback than OpenVPN on windows (running in user mode)?
Re:WireGuard is submitted for Linux kernel inclusion
by Hello71 on Wednesday August 01, 2018 @09:56AM
(#17662514)
OpenVPN is quite configurable, not as much as IPsec, but still a lot, and (from what I hear) has quite a bit of code bloat. I believe that userspace WireGuard has better performance than OpenVPN.
Re:WireGuard is submitted for Linux kernel inclusion
by cm2187 on Wednesday August 01, 2018 @10:06AM
(#17662589)
My understanding (and experience) is that OpenVPN on windows is structurally capped at about 5-10 MB/s. I was curious of how that compares to WireGuard.
Re:WireGuard is submitted for Linux kernel inclusion
by neilalexander on Wednesday August 01, 2018 @10:41AM
(#17662885)
Performance issues with OpenVPN on Windows arise out of the inefficiencies of the TUN/TAP driver, not the OpenVPN software itself.
Re:WireGuard is submitted for Linux kernel inclusion
by cm2187 on Wednesday August 01, 2018 @11:35AM
(#17663467)
I am sure that's true, but unless there is an alternative driver I am not sure why that makes a difference.
Re:WireGuard is submitted for Linux kernel inclusion
by majewsky on Wednesday August 01, 2018 @05:50AM
(#17661031)
Thomas Ptacek does it better than me: https://news.ycombinator.com/item?id=14599834
Re:WireGuard is submitted for Linux kernel inclusion
by dtx1 on Wednesday August 01, 2018 @04:24AM
(#17660534)
Do you only use it to connect remotely into your home network or are there VPN Services for wireguard available?
Re:WireGuard is submitted for Linux kernel inclusion
by mick87 on Wednesday August 01, 2018 @04:35AM
(#17660591)
I use the mullvad VPN service for wireguard. They currently have 44 wireguard servers active around the world.
Re:WireGuard is submitted for Linux kernel inclusion
by bjoli on Wednesday August 01, 2018 @06:48AM
(#17661320)
I second this. I remember reading an interview with one of the mullvad staff saying "y dream openVPN config would be [insert more or less verbatim the wireguard spec], but due to the nature of openVPN that either won't happen or will take a long time". They were quick at adopting wireguard :)
They are very knowledgeable and spend a lot of effort in securing their VPN. I contacted them about what I thought was a bug, and got a very thorough answer about why mullvad behaved like that, what kind of threat it mitigated, and how I got the behaviour I wanted together with things I could do to keep safe (which was to update the kernel). Within 6 hours.
I am a very happy customer.
Re:WireGuard is submitted for Linux kernel inclusion
by bubblethink on Wednesday August 01, 2018 @05:39AM
(#17660971)
Azire gives free WG access while in beta