- cross-posted to:
- technology@lemmy.world
- Technology@programming.dev
- cross-posted to:
- technology@lemmy.world
- Technology@programming.dev
You must log in or # to comment.
Why must everyone be removing OVPN 🙁
Because wireguard is vastly better.
It isn’t in a lot of ways
How so? EDIT: I see you’ve already elaborated in other comments.
- It is inefficient in both tunnel and transport mode, sacrificing 20-30% of available bandwidth.
- It is cryptographically expensive, making your clients work harder and costing the VPN provider more money to host nodes.
- It is complex to setup and deploy.
- Uses outdated crypto.
- Operates in Userspace.
- WireGuard is essentially better in every one of these regards.
OpenVPN operates in kernel space as of 6.16. Well specifically for the data channel. Control channel is still managed in userspace so you don’t have to do asymmetric TLS in the kernel. This also reduces the overhead and increases performance substantially. It is slightly more complicated to setup but barely tbh (I’m speaking from the server side). Is the crypto outdated? Not as far as I’m aware.