4 ms·
Initial setup for IKEv2 is convoluted at best, but once it’s setup there are very few problems with it. I (used to) run L2TP/IPSec and WireGuard on my Edgerout
by 8fingerlouie 7y ago
Initial setup for IKEv2 is convoluted at best, but once it’s setup there are very few problems with it.
I (used to) run L2TP/IPSec and WireGuard on my Edgerouter 4, and both would give “acceptable” speeds (30-40 MBit on a 300/300 connection), but when recreating my firewall in PfSense, I went full IKEv2, and have not regretted it. With my SG-3100 I get ~100 MBit with IKEv2.
On thing I hated about WireGuard is the fact that all clients require configuration on the server.
I do still run it on one of my servers, as a client to Mullvad VPN, which in turn is used by a few docker containers. It could easily be replaced by IKEv2, but sadly most VPN providers only support OpenVPN and WireGuard, or have horrible speeds.