WireGuard 1.0 for Linux 5.6 • Hacker News Board

Re: WireGuard 1.0 for Linux 5.6

#11

Post by myu701 » Mon, Mar 30, 2020, 1:04 PM UTC

xal wrote: post #5

Given the occasion, could someone write a paragraph about what downstream effects are expected by wireguard existing? So far I’ve seen mostly technical arguments for it. VPNs have become a more important piece of infrastructure now. The most significant approachability increase really came from mobile based solutions and auto pilot systems like Google’s Outline. Will WG make a marked difference in stability, speed, a…

Someone else can give a much better comparison than me, this is just to get you started.

Compared to the 80% use case of OpenVPN, Wireguard is:

1. Much less code. A few thousand lines of code vs lots more for OpenVPN

2. Speedier. WG does UDP traffic so there is less overhead on the protocol level for syncs acks etc.

3. Easier on mobile battery life due to decreased complexity

For one example use case comparing them side by side, see PiVPN, which I use to setup a Raspberry Pi Zero W on my home network, create a client key for my phone, open a single port forward to the pivpn server, download the wireguard app, scan the qr code the pivpn key generated, and poof, I can check a box and 'be' on my home network, behind my pihole, and with access to my LAN resources.

OpenVPN can do that usecase with pivpn as well but its more processor intensive and a little more setup vs wireguard.

Re: WireGuard 1.0 for Linux 5.6

#12

Post by kertis » Mon, Mar 30, 2020, 1:05 PM UTC

xal wrote: post #5

Given the occasion, could someone write a paragraph about what downstream effects are expected by wireguard existing? So far I’ve seen mostly technical arguments for it. VPNs have become a more important piece of infrastructure now. The most significant approachability increase really came from mobile based solutions and auto pilot systems like Google’s Outline. Will WG make a marked difference in stability, speed, a…

Among other features WireGuard has roaming mode, it's fantastic for mobile devices. Just try it, it's easy and quick!

Re: WireGuard 1.0 for Linux 5.6

#13

Post by kertis » Mon, Mar 30, 2020, 1:08 PM UTC

myu701 wrote: post #11

xal wrote: post #5

Given the occasion, could someone write a paragraph about what downstream effects are expected by wireguard existing? So far I’ve seen mostly technical arguments for it. VPNs have become a more important piece of infrastructure now. The most significant approachability increase really came from mobile based solutions and auto pilot systems like Google’s Outline. Will WG make a marked difference in stability, speed, a…

Someone else can give a much better comparison than me, this is just to get you started. Compared to the 80% use case of OpenVPN, Wireguard is: 1. Much less code. A few thousand lines of code vs lots more for OpenVPN 2. Speedier. WG does UDP traffic so there is less overhead on the protocol level for syncs acks etc. 3. Easier on mobile battery life due to decreased complexity For one example use case comparing them s…

> little more setup

A lot more! PKI infrastructure, chiphersuites and so on and so forth...

By the way OpenVPN also can work with UDP, even it's default mode.

Re: WireGuard 1.0 for Linux 5.6

#14

Post by newscracker » Mon, Mar 30, 2020, 1:10 PM UTC

For anyone wanting to try it, WireGuard with Algo VPN [1] to set it up on a server is a great combination. I found it quite easy to setup and use.

Algo has built-in support for various cloud providers, where, when you run it from, day, your desktop, it can setup the VPN server for you based on answers to some questions (with sensible defaults) and some information on connecting to the provider (like an API key, for example). You also get QR code images that you can use to install a VPN profile on your phone.

You can also run Algo from within a server and have it setup the VPN for you.

[1]: https://github.com/trailofbits/algo

Re: WireGuard 1.0 for Linux 5.6

#15

Post by vbezhenar » Mon, Mar 30, 2020, 1:11 PM UTC

myu701 wrote: post #11

xal wrote: post #5

Given the occasion, could someone write a paragraph about what downstream effects are expected by wireguard existing? So far I’ve seen mostly technical arguments for it. VPNs have become a more important piece of infrastructure now. The most significant approachability increase really came from mobile based solutions and auto pilot systems like Google’s Outline. Will WG make a marked difference in stability, speed, a…

Someone else can give a much better comparison than me, this is just to get you started. Compared to the 80% use case of OpenVPN, Wireguard is: 1. Much less code. A few thousand lines of code vs lots more for OpenVPN 2. Speedier. WG does UDP traffic so there is less overhead on the protocol level for syncs acks etc. 3. Easier on mobile battery life due to decreased complexity For one example use case comparing them s…

I wonder how WireGuard compares to IPsec with regards to the mobile battery. AFAIK IPsec implemented in kernel while WireGuard uses user-space implementation on mobile devices, at least for now.

Re: WireGuard 1.0 for Linux 5.6

#16

Post by sirtoffski » Mon, Mar 30, 2020, 1:11 PM UTC

Congratulations and big thanks to all of the project developers and contributors!

Re: WireGuard 1.0 for Linux 5.6

#17

Post by newscracker » Mon, Mar 30, 2020, 1:13 PM UTC

pkrumins wrote: post #4

Very exciting! Does anyone know a good howto or a tutorial about it?

I’d recommend using Algo VPN. See my comment in this discussion here: https://news.ycombinator.com/item?id=22727713

Re: WireGuard 1.0 for Linux 5.6

#18

Post by sccxy » Mon, Mar 30, 2020, 1:17 PM UTC

pkrumins wrote: post #4

Very exciting! Does anyone know a good howto or a tutorial about it?

Easiest way with pivpn:

https://github.com/pivpn/pivpn

Re: WireGuard 1.0 for Linux 5.6

#19

Post by rubenbe » Mon, Mar 30, 2020, 1:18 PM UTC

newscracker wrote: post #14

For anyone wanting to try it, WireGuard with Algo VPN [1] to set it up on a server is a great combination. I found it quite easy to setup and use. Algo has built-in support for various cloud providers, where, when you run it from, day, your desktop, it can setup the VPN server for you based on answers to some questions (with sensible defaults) and some information on connecting to the provider (like an API key, for e…

Does the VPS have unencrypted access to the VPN? It's something I would want to avoid. (A VPS is a prime candidate to be compromised)

Re: WireGuard 1.0 for Linux 5.6

#20

Post by tw04 » Mon, Mar 30, 2020, 1:18 PM UTC

kertis wrote: post #12

xal wrote: post #5

Given the occasion, could someone write a paragraph about what downstream effects are expected by wireguard existing? So far I’ve seen mostly technical arguments for it. VPNs have become a more important piece of infrastructure now. The most significant approachability increase really came from mobile based solutions and auto pilot systems like Google’s Outline. Will WG make a marked difference in stability, speed, a…

Among other features WireGuard has roaming mode, it's fantastic for mobile devices. Just try it, it's easy and quick!

In my experience the problem with roaming mode is it blocks the login page for wireless networks. IE: in a coffee shop. Maybe that's been fixed recently, but it was a giant PITA in the past.