91–100 of 214 posts
I've used a ton of VPN over the years, even some I wrote myself, and I've never seen anything that comes close to wireguard in terms of: ease of use, speed, cleanliness of code.
The world just got a whole lot secure and flexible.
I really hope WireGuard becomes a standard and get's included in the macOS/iOS and Windows kernels as well. Key management and and other fancy features could be left to userspace applications but having the basic wg capability in the kernel would be great.
I really hope WireGuard becomes a standard and get's included in the macOS/iOS and Windows kernels as well. Key management and and other fancy features could be left to userspace applications but having the basic wg capability in the kernel would be great.
Seems like a very long shot to make it into Apple products both because of the license and the fact it wasn’t invented in Cupertino. FWIW the userspace implementations are quite good, and still out performs IPSec.
But the 'not invented here' syndrome is very real.
Earlier quoted context omitted.
If you're subject to state level actors attacking you, a VPS is probably the least of your worries. If you're just trying to make sure some kiddiot in a coffee shop isn't doing mass collections, a VPS is perfectly secure.
Linode has been compromised how many times now? I don't think considering a VPS insecure is really that far fetched.
If you dont want to trust them now, in 2020, don't - they aren't the only provider of VMs. I'd imagine the big cloud providers (AWS/GCP/Azure) have fairly significant security teams - has there ever been a disclosure of customer VMs being compromised on any of them?
I use WireGuard and it works perfectly fine as it is. Can someone explain why we need/want to put it into the Linux kernel?
Earlier quoted context omitted.
WG is much faster in our tests than OpenVPN, and a bit faster than IPSec depending on the system. OpenVPN uses UDP too but OpenVPN is kind of slow.
Or much slower on systems with AES-NI, but relatively slow CPU. Like are used in some hi-end SOHO routers. I did not test IPSec vs WireGuard, but scp from/to my home router/NAS is about three times faster with AES (used by IPSec) than with Chacha20 (used by WG).
still no good tutorial for complete beginners
Much better documentation is here: https://github.com/pirate/wireguard-docs
Earlier quoted context omitted.
ISPs or countries ?
In some cases, countries. In the country I'm thinking of (name omitted on purpose), you have an effective choice of two ISPs, both government-controlled.
What about encrypted TCP? Do they block/throttle everything but web and recognized traffic? If that's the case wrapping WG or ZeroTier or whatever in TCP would do nothing since it would still look like a weird unrecognized protocol with a max entropy (encrypted) data stream.