Re:Why Not WireGuard (2020)
by petre on Sunday October 17, 2021 @11:14AM
(#28897056)
Come on, I'm exactly using it on a dynamic IP, but with a caveat: it's a forwaded port on the firewall to a machine on the private network which runs wg. That's how I remotely connect to my HomeAssistant installation. So just run it on localhost or a private IP and redirect the port from the dynamic IP.
I had to do this because I lost my patience while configuring OpenVPN on my Mikrotik router. Wg by contrast was very easy to install, a plugin on HA, and a QR code on my phone. No copying keys, no config, no BS. Van't wait for it to be included in RouterOS.
The only issue I had with it running on a VM was that the VPN would randomly fail for some obscure reason and I was left with a frozen terminal in the middle of a ssh session. So I switched to an existing OpenVPN instalation on bare metal which works flawlessly. I need the VPN exactly because my IP changes at every PPPoE session, so I can't use IP based ssh access.
Who cares if Cisco is not using it? Most commercial VPNs are junk or insecure anyway (PPTP I'm looking at you). They'll have to provide it when everyone uses it, just like they did with ssh.
Re:Why Not WireGuard (2020)
by Jnr on Sunday October 17, 2021 @01:29PM
(#28898112)
I am using Wireguard on Mikrotik RouterOS v7. It is not yet considered a stable release but it really is stable. I guess it will become stable once they figure out automatic way of migrating config from v6.
I had to do this because I lost my patience while configuring OpenVPN on my Mikrotik router. Wg by contrast was very easy to install, a plugin on HA, and a QR code on my phone. No copying keys, no config, no BS. Van't wait for it to be included in RouterOS.
The only issue I had with it running on a VM was that the VPN would randomly fail for some obscure reason and I was left with a frozen terminal in the middle of a ssh session. So I switched to an existing OpenVPN instalation on bare metal which works flawlessly. I need the VPN exactly because my IP changes at every PPPoE session, so I can't use IP based ssh access.
Who cares if Cisco is not using it? Most commercial VPNs are junk or insecure anyway (PPTP I'm looking at you). They'll have to provide it when everyone uses it, just like they did with ssh.