Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Full WireGuard Support in ProtonVPN for Android

github.com

Post reply on HN
Print view View original

41–50 of 51 posts

Re: Full WireGuard Support in ProtonVPN for Android

#41

Post by not-elite »

babayega2 wrote: post #37

3 years ago I installed Project Streisand [0] on one of my Digitaocean droplets which configured automatically different VPN protocols and my favorite one has been Wireguard. To this day I still use it on all my devices and it's only last month that I was made aware that the project has been discontinued (Why??). But my Wireguard VPN is still kicking. Works like a charm. On all devices. I can use restricted apps in A…

> last month that I was made aware that the project has been discontinued (Why??)

It looks like the main contributor is (or was very recently) a Signal developer [1], but they have not committed to Streisand since 2018 [2].

[1] https://signal.org/blog/help-iran-reconnect/

[2] https://github.com/StreisandEffect/streisand/graphs/contribu...

Re: Full WireGuard Support in ProtonVPN for Android

#42

Post by aborsy »

When comparing Wireguard with OpenVPN, it’s worth mentioning that:

* While creating a point to point tunnel is straightforward with Wireguard, it’s the networking part that takes time.

You need to do a bit of networking to set up firewall, access internet and other networks, etc, that may not follow a standard formula depending on your set up.

* Wireguard creates a tunnel. OpenVPN does a lot more, such as authentication, etc. The tunneling part of OpenVPN is much smaller than the whole

* Wireguard doesn’t support TCP

Re: Full WireGuard Support in ProtonVPN for Android

#43

Post by tptacek »

aborsy wrote: post #42

When comparing Wireguard with OpenVPN, it’s worth mentioning that: * While creating a point to point tunnel is straightforward with Wireguard, it’s the networking part that takes time. You need to do a bit of networking to set up firewall, access internet and other networks, etc, that may not follow a standard formula depending on your set up. * Wireguard creates a tunnel. OpenVPN does a lot more, such as authenticat…

The stuff that WireGuard doesn't do is part of the appeal. WireGuard is simple to understand (and audit), behaves consistently, and is easy to build on top of.

Re: Full WireGuard Support in ProtonVPN for Android

#44

Post by tptacek »

TedDoesntTalk wrote: post #30
wolverine876 wrote: post #27

Earlier quoted context omitted.

Regarding stability: WireGuard is widely used, Linus allowed it into the Linux kernel, and I haven't heard anyone mention stability problems. WireGuard is also orders of magnitude more secure than OpenVPN.

> WireGuard is also orders of magnitude more secure than OpenVPN. This entirely depends on how you configure OpenVPN, which encryption to allow it to support, HMAC, hashes, etc. If you configure it with maximum security, it is equally secure as WireGuard. If you configure it less so, then you allow older clients to connect.

No, it does not depend on configuration. You cannot configure OpenVPN to be "equally as secure as WireGuard".

Re: Full WireGuard Support in ProtonVPN for Android

#45

Post by tumblewit »

Apple is getting into VPN now and if I was to guess they would integrate it with some kind of hardware block in their silicon to make it seamless and transparent. I wonder if Wireguard is at the point where silicon makers can actually consider a hardware block such that the VPN is completely transparent to the cores. Personally I find it better to have individual devices do the VPN than at the central network of my home as I find that these mobile devices are significantly more powerful and efficient to do it.

Re: Full WireGuard Support in ProtonVPN for Android

#46

Post by emptyparadise »

oliverjudge wrote: post #2

It’s nice to see one of these providers upgrading their protocols away from openvpn and the like, but it still doesn’t solve the problem of these commercial VPN’s are still just someone else’s computer.

Most of the internet consists of somebody else's computers, doesn't it? Not that this makes shady VPN provider practices okay.

Re: Full WireGuard Support in ProtonVPN for Android

#47

Post by throwaway2048 »

aborsy wrote: post #42

When comparing Wireguard with OpenVPN, it’s worth mentioning that: * While creating a point to point tunnel is straightforward with Wireguard, it’s the networking part that takes time. You need to do a bit of networking to set up firewall, access internet and other networks, etc, that may not follow a standard formula depending on your set up. * Wireguard creates a tunnel. OpenVPN does a lot more, such as authenticat…

standard networking stack handle all that stuff already, replicating it in a VPN protocol sucks.

Re: Full WireGuard Support in ProtonVPN for Android

#48

Post by aborsy »

tptacek wrote: post #43
aborsy wrote: post #42

When comparing Wireguard with OpenVPN, it’s worth mentioning that: * While creating a point to point tunnel is straightforward with Wireguard, it’s the networking part that takes time. You need to do a bit of networking to set up firewall, access internet and other networks, etc, that may not follow a standard formula depending on your set up. * Wireguard creates a tunnel. OpenVPN does a lot more, such as authenticat…

The stuff that WireGuard doesn't do is part of the appeal. WireGuard is simple to understand (and audit), behaves consistently, and is easy to build on top of.

Would you say that a base Wireguard installation is a solution for enterprise?

And that, stuff that tailscale adds is superfluous or not appealing?

The complexity rapidly grows as you scale, mostly pertaining to networking.

Now a better question is, how does OpenVPN compare with tailscale?!

Re: Full WireGuard Support in ProtonVPN for Android

#49

Post by wg-throw-away »

na85 wrote: post #40
icelancer wrote: post #18

Earlier quoted context omitted.

I tried setting it up on a VPS on Ubuntu the other day, got it installed after doing some config files, connected to the tunnel, could access the server but not the wider Internet. Made about 4-5 config changes per a bunch of Stackoverflow posts then gave up since nothing worked. Installed OpenVPN instead, took me 2 minutes and worked immediately with far fewer config files changes. I've had this experience before wi…

>I tried setting it up on a VPS on Ubuntu the other day, got it installed after doing some config files, connected to the tunnel, could access the server but not the wider Internet. Made about 4-5 config changes per a bunch of Stackoverflow posts then gave up since nothing worked. I ran into this also. The docs are quite bad, in the sense that they assume a lot on the part of the reader and only cover a fairly simple…

I have a script to automate the pain away with creating throw away VM instances based on Ubuntu/Debian. Almost every fail is not allowing the correct ingress port into the VM (51820 in my case)

https://pastebin.com/09iE1sME

Re: Full WireGuard Support in ProtonVPN for Android

#50

Post by _8j50 »

georgyo wrote: post #13
_8j50 wrote: post #6

I've mostly only used OpenVPN for personal VPN needs. Is WG stable/reliable? My OpenVPN tunnels bounce too much.

All the replies to your comment seem like sales pitches that don't actually explain anything. The difference between wireguard and OpenVPN is that there is no real negotiation between the client and server. Connecting to OpenVPN can take several seconds as it authenticates you, figured out encryption algorithms, IP and route management. If the network or OpenVPN server hiccup, it drops you and you need to reconnect a…

Thanks, that was very useful
Post reply on HN