Having relied on both OpenVPN and IPSEC in the past, I can tell you that configuring WireGuard is several orders of magnitude simpler. It's outright easy (OpenV

Having relied on both OpenVPN and IPSEC in the past, I can tell you that configuring WireGuard is several orders of magnitude simpler. It's outright easy (OpenVPN is difficult, IPSEC is a smoking pile of horsedung). Furthermore, with the intention of being mainlined (it is currently available as a DKMS-powered package), wireguard will end up being universally available in the Linux world (other platforms will for now rely on user-space implementations). The availability of ipsec, much easier to configure than openvpn, better crypto, and flexibility that none of the existing options can match, such as full IP change resilience (as long as only one end change at a time) and connection persistence. It makes you wonder why VPN's have been so bad for so long.