News for hackers. Stuff that matters.
Re:WireGuard is submitted for Linux kernel inclusion by ofrzeta on Wednesday August 01, 2018 @04:05AM (#17660457)
Great news. I started using Wireguard instead of OpenVPN and won't look back. Actually it was easy to set up even with DKMS kernel modules but having it in mainline will be great.
Re:WireGuard is submitted for Linux kernel inclusion by simias on Wednesday August 01, 2018 @05:32AM (#17660918)
Can you explain what makes it better than venerable old OpenVPN?
Re:WireGuard is submitted for Linux kernel inclusion by phaer on Wednesday August 01, 2018 @05:42AM (#17660991)
Mostly speed, a more minimal configuration syntax, more modern crypto.

OpenVPN works fine, is quite portable and runs in user space. It's quite a lot slower, but is well-tested and can be managed with a Certificate Authority in organisation where that's desired.

Re:WireGuard is submitted for Linux kernel inclusion by cm2187 on Wednesday August 01, 2018 @08:28AM (#17661848)
I presume speed on linux? Otherwise doesn't wireguard suffer from the same peformance drawback than OpenVPN on windows (running in user mode)?
Re:WireGuard is submitted for Linux kernel inclusion by Hello71 on Wednesday August 01, 2018 @09:56AM (#17662514)
OpenVPN is quite configurable, not as much as IPsec, but still a lot, and (from what I hear) has quite a bit of code bloat. I believe that userspace WireGuard has better performance than OpenVPN.
Re:WireGuard is submitted for Linux kernel inclusion by cm2187 on Wednesday August 01, 2018 @10:06AM (#17662589)
My understanding (and experience) is that OpenVPN on windows is structurally capped at about 5-10 MB/s. I was curious of how that compares to WireGuard.
Re:WireGuard is submitted for Linux kernel inclusion by neilalexander on Wednesday August 01, 2018 @10:41AM (#17662885)
Performance issues with OpenVPN on Windows arise out of the inefficiencies of the TUN/TAP driver, not the OpenVPN software itself.
Re:WireGuard is submitted for Linux kernel inclusion by cm2187 on Wednesday August 01, 2018 @11:35AM (#17663467)
I am sure that's true, but unless there is an alternative driver I am not sure why that makes a difference.
Re:WireGuard is submitted for Linux kernel inclusion by majewsky on Wednesday August 01, 2018 @05:50AM (#17661031)
Thomas Ptacek does it better than me: https://news.ycombinator.com/item?id=14599834
Re:WireGuard is submitted for Linux kernel inclusion by dtx1 on Wednesday August 01, 2018 @04:24AM (#17660534)
Do you only use it to connect remotely into your home network or are there VPN Services for wireguard available?
Re:WireGuard is submitted for Linux kernel inclusion by mick87 on Wednesday August 01, 2018 @04:35AM (#17660591)
I use the mullvad VPN service for wireguard. They currently have 44 wireguard servers active around the world.
Re:WireGuard is submitted for Linux kernel inclusion by bjoli on Wednesday August 01, 2018 @06:48AM (#17661320)
I second this. I remember reading an interview with one of the mullvad staff saying "y dream openVPN config would be [insert more or less verbatim the wireguard spec], but due to the nature of openVPN that either won't happen or will take a long time". They were quick at adopting wireguard :)

They are very knowledgeable and spend a lot of effort in securing their VPN. I contacted them about what I thought was a bug, and got a very thorough answer about why mullvad behaved like that, what kind of threat it mitigated, and how I got the behaviour I wanted together with things I could do to keep safe (which was to update the kernel). Within 6 hours.

I am a very happy customer.

Re:WireGuard is submitted for Linux kernel inclusion by bubblethink on Wednesday August 01, 2018 @05:39AM (#17660971)
Azire gives free WG access while in beta
Re:WireGuard is submitted for Linux kernel inclusion by apazgo on Wednesday August 01, 2018 @06:00AM (#17661088)
I second Azirevpn.com! Great speeds