Roll your own VPN for WFH

Not checking the document right now, but for private home, you should be looking at e.g. Wireguard.
 
I've used Softether in the past and it's one of my favorite open source projects. Battled to get a site to site setup going but that was more a me issue than a Softether issue.

I'm interested at the moment in Slack Nebula which is also a very cool project with a lot of potential.
 
Cisco AnyConnect for work but I use Wireguard in my personal capacity running in a container on my NAS.

I used to be a purveyor of OpenVPN until I saw the light with WG - it absolutely shines on slower connections which would cause massive problems with OPVN.
 
PhireSide said:
Cisco AnyConnect for work but I use Wireguard in my personal capacity running in a container on my NAS.

I used to be a purveyor of OpenVPN until I saw the light with WG - it absolutely shines on slower connections which would cause massive problems with OPVN.
Click to expand...
WG is a great generic service and I use it in SD-WAN to achieve high speed encryption between hubs. Its combined with Babel as the routing protocol and configuration/implementation is nearly instantaneous.
I was gobsmacked as on the tool I used it with was a single slider button and everything was automated.
 
r00igev@@r said:
WG is a great generic service and I use it in SD-WAN to achieve high speed encryption between hubs. Its combined with Babel as the routing protocol and configuration/implementation is nearly instantaneous.
I was gobsmacked as on the tool I used it with was a single slider button and everything was automated.
Click to expand...
It really is quite polished and easy to use.

In my case at home, all it needed was me spinning up the container, punching a hole through the firewall and scanning the QR code with my phone and hey presto - insta-VPN!
 
Anthro said:
Been using https://www.tailscale.com/ which is built on WireGuard, works well
Click to expand...

I was looking at Tailscale and Zerotier for remote access for +/- 1000 users. Tailscale's pricing (as per their website) is right out of the ballpark that I could motivate.

I had a Zoom call with Zerotier a few weeks ago and TBH it was a bit of a waste of time. I really like their offering in principle and their pricing is in line with what I could potentially justify but their pricing structure and approach seems a bit confused - you pay $x per month for 500 users but $6x for 1000 users plus an additional $3x per additional 150 users. A bit funky.
 
Johnatan56 said:
As InvisibleJim said, if you can't manage to get Wireguard working, SoftEther has good docs.
And then if you are running an old Windows or Linux server, since support.
Click to expand...
I do not have an issue getting wireguard to work, I'm just asking if there's any reason not to use it.
 
Brave Traveler said:
I do not have an issue getting wireguard to work, I'm just asking if there's any reason not to use it.
Click to expand...
SoftEther does come with a couple of applications and features like the graphical server manager, virtual hubs and routers etc. that I don't think you get out of the box with Wireguard (and I stand to be corrected, I haven't used Wireguard yet so please don't think I'm knocking it at all.) In that sense, the scope and objectives of the two projects are a little different - Wireguard seems to be focused on doing the VPN connection really, really well whereas SoftEther is a little broader perhaps.

Wireguard is also a fairly new project so in the case of @r00igev@@r 's solution, I expect it may not have been an option when he began his project.

I see that Veeam actually offer a free VPN solution called Veeam Powered Network which is based on Wireguard and at first glance seems similar to what you get with SoftEther.
 
InvisibleJim said:
SoftEther does come with a couple of applications and features like the graphical server manager, virtual hubs and routers etc. that I don't think you get out of the box with Wireguard (and I stand to be corrected, I haven't used Wireguard yet so please don't think I'm knocking it at all.) In that sense, the scope and objectives of the two projects are a little different - Wireguard seems to be focused on doing the VPN connection really, really well whereas SoftEther is a little broader perhaps.

Wireguard is also a fairly new project so in the case of @r00igev@@r 's solution, I expect it may not have been an option when he began his project.

I see that Veeam actually offer a free VPN solution called Veeam Powered Network which is based on Wireguard and at first glance seems similar to what you get with SoftEther.
Click to expand...
Correct when I started Wireguard wasn't available. Wireguard is also generic to be used in many scenarios. I use it to connect SD-WAN hubs. Its stable code and don't even realize its there.
The Veeam project needs ESXi which I don't use. I have a instance of debian buster with the backports version of cockpit and machines to run KVM. Works a charm.
But that Veeam project looks kewl and hope they publish .debs.
PS: Life's too short to deal with IPSEC or OVPN...
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X