3 ms·

is really wireguard that better than other VPNs? I always wondered if there is need for a "better" vpn. I mean a more reliable VPN is probably needed, i.e. som

by merb 8y ago

is really wireguard that better than other VPNs? I always wondered if there is need for a "better" vpn. I mean a more reliable VPN is probably needed, i.e. something that isn't detectable. However I guess wireguard has all the problems than most VPNs once it's known how it works it's detectable with a DPI. What I probably want to see is a VPN over h2c or over quick, its probably impossible to detect it, it looks like regular web traffic.

akerl_ 8y ago
IIRC, Wireguard doesn't target "undetectability" as a feature. Wireguard is better than other VPN software because it's intentionally minimal, with a small set of crypto in-use and simple design choices, leading to small easily-auditable codebases. It's also got a pretty straightforward set of config options without a barrage of tunables, which makes it pretty much impossible to subtly misconfigure things in a way that harms security.
viraptor 8y ago
You'll always be able to tell VPN traffic from the rest due to behaviour patterns. If you can tell apart Netflix movies from packet sizes/timing, you can easily tell when something's a persistent tunnel for various connections (i.e. VPN). The only way would be to keep the pipe continuously saturated with some padding while you're not sending real data... But is that worth it?
SEJeff 8y ago
Wireguard focuses on being a better vpn where better is vaguely defined as using modern crypto in a way that is hard to get wrong. As a result, it is a lot simpler with far fewer bells and whistles. This means it tends to be orders of magnitude faster than an equivalent usage of say openvpn (I measured 15mbps vs 52mbps awhile back with openvpn and wireguard respectively). What you want is a slightly different albeit very important problem to solve reliably.
swinglock 8y ago
Yes. Besides being fast and small, it connects very quickly, does seamless roaming and works without keepalives, making it incredibly well suited for mobile clients.
nickik 8y ago
Easier to set up, faster, safer and it does not restart connection when you go from Wifi to mobile.

by merb 8y ago

akerl_ 8y ago

IIRC, Wireguard doesn't target "undetectability" as a feature. Wireguard is better than other VPN software because it's intentionally minimal, with a small set of crypto in-use and simple design choices, leading to small easily-auditable codebases. It's also got a pretty straightforward set of config options without a barrage of tunables, which makes it pretty much impossible to subtly misconfigure things in a way that harms security.

viraptor 8y ago

You'll always be able to tell VPN traffic from the rest due to behaviour patterns. If you can tell apart Netflix movies from packet sizes/timing, you can easily tell when something's a persistent tunnel for various connections (i.e. VPN). The only way would be to keep the pipe continuously saturated with some padding while you're not sending real data... But is that worth it?

SEJeff 8y ago

Wireguard focuses on being a better vpn where better is vaguely defined as using modern crypto in a way that is hard to get wrong. As a result, it is a lot simpler with far fewer bells and whistles. This means it tends to be orders of magnitude faster than an equivalent usage of say openvpn (I measured 15mbps vs 52mbps awhile back with openvpn and wireguard respectively). What you want is a slightly different albeit very important problem to solve reliably.

swinglock 8y ago

Yes. Besides being fast and small, it connects very quickly, does seamless roaming and works without keepalives, making it incredibly well suited for mobile clients.

nickik 8y ago

Easier to set up, faster, safer and it does not restart connection when you go from Wifi to mobile.