4 ms·
I've been using streisand for a while (from China) and it's great; the main reason I can see that you might want to use the linked project instead is that it ha
by bdarnell 10y ago
I've been using streisand for a while (from China) and it's great; the main reason I can see that you might want to use the linked project instead is that it has a lot less surface area so it could be more secure (it's a lot easier to harden/audit openvpn alone than all the services streisand includes).
That said, if I was going to pick one protocol out of the selection offered by streisand, it would be l2tp/ipsec instead of openvpn (assuming you're hosting on digital ocean. The networks on AWS and GCE are more restrictive and you can't serve l2tp/ipsec from there). I found this to be easier to set up (the client-side software is already included in most operating systems) and to have the best performance.
- bdarnell 10y agoFrom another subthread, https://github.com/trailofbits/algo https://github.com/trailofbits/algo is an ipsec-only alternative to streisand that looks good (although it requires an app to be installed on android). They also get ipsec working on aws/gce, so apparently whatever obstacle streisand faces with this configuration is solvable.
- fulafel 10y agoCaveat: That unconditionally blocks traffic between your friends and family (see issue #166).