WireGuard VPN review: A new type of VPN offers serious advantages

Re:WireGuard VPN review: A new type of VPN offers serious ad... by atombender on Sunday August 26, 2018 @08:05PM (#17848618)

Tinc is also completely userland (as opposed to implemented in a kernel module), and therefore slow enough to be practically unusable unless you're on a very slow connection.

Compare this to something like IPSec, where the userland is typically only used for the control part; once a connection exists, the packets don't leave the kernel, so no context switch needed.

[ Parent | on HN ]

Re:WireGuard VPN review: A new type of VPN offers serious ad... by api on Sunday August 26, 2018 @09:28PM (#17848871)

I dont know about tinc, but we've benchmarked ZeroTier which is user land and gotten results close to IPSec. The tun/tap overhead is low. It might matter if you are pumping serious traffic, like encrypting a data center or leased fiber line.

If tinc is crazy slow I suspect it's an implementation issue.

[ Parent | on HN ]

Re:WireGuard VPN review: A new type of VPN offers serious ad... by atombender on Monday August 27, 2018 @12:25PM (#17852399)

I'm sure you could make a userland tun/tap decently fast, but Tinc isn't it. Back when I was testing it, it was about 40% slower than IPsec.

[ Parent | on HN ]

Re:WireGuard VPN review: A new type of VPN offers serious ad... by api on Monday August 27, 2018 @05:04PM (#17854536)

Our stats were within 5% of IPSec, so that's definitely an implementation issue.

[ Parent | on HN ]