5 ms·

While I don't think setting up openvpn is "difficult", in the sense that it's a hard problem to solve, I would definitely not go as far as to say that it is "de

by Naac 7y ago

While I don't think setting up openvpn is "difficult", in the sense that it's a hard problem to solve, I would definitely not go as far as to say that it is "dead easy". Setting up openvpn is definitely involved[0]. And I think being concerned that you've configured something incorrectly is a real issue, especially when it comes to security. [0] https://wiki.archlinux.org/index.php/OpenVPN https://wiki.archlinux.org/index.php/OpenVPN

Erlich_Bachman 7y ago
But you would trust this toy project in terms of security? The point of something like OpenVPN is that all security cases and bugs are worked out already, and there is tons of information for all use cases, and everything is already polished. Sure you might need to learn some new configuration options, but you won't just use them in this project, they will serve you for the rest of your life for all possible VPN usage cases.
- sam_lowry_ 7y ago
  The more complex the project, the less secure it is.
- microcolonel 7y ago
  > all security cases and bugs are worked out already This is likely not the case. While it's true that there hasn't been a severe/highly exploitable published vulnerability in OpenVPN for the last decade or so, that doesn't mean that there aren't vulnerabilities.
xorcist 7y ago
That document describes a more complex configuration, including things like MTU configuration, DNS tunneling and firewalling your traffic. A shared secret point to point link really is dead simple with OpenVPN. The first half of this mini-howto is basically it: https://openvpn.net/community-resources/static-key-mini-howto/ https://openvpn.net/community-resources/static-key-mini-howt... (Note that it uses the default settings of UDP 1194. To use TCP 443 as discussed above, also set "proto tcp-server" and "port 443").

5 ms·

While I don't think setting up openvpn is "difficult", in the sense that it's a hard problem to solve, I would definitely not go as far as to say that it is "de

by Naac 7y ago

Erlich_Bachman 7y ago
But you would trust this toy project in terms of security? The point of something like OpenVPN is that all security cases and bugs are worked out already, and there is tons of information for all use cases, and everything is already polished. Sure you might need to learn some new configuration options, but you won't just use them in this project, they will serve you for the rest of your life for all possible VPN usage cases.
- sam_lowry_ 7y ago
  The more complex the project, the less secure it is.
- microcolonel 7y ago
  > all security cases and bugs are worked out already This is likely not the case. While it's true that there hasn't been a severe/highly exploitable published vulnerability in OpenVPN for the last decade or so, that doesn't mean that there aren't vulnerabilities.
xorcist 7y ago
That document describes a more complex configuration, including things like MTU configuration, DNS tunneling and firewalling your traffic. A shared secret point to point link really is dead simple with OpenVPN. The first half of this mini-howto is basically it: https://openvpn.net/community-resources/static-key-mini-howto/ https://openvpn.net/community-resources/static-key-mini-howt... (Note that it uses the default settings of UDP 1194. To use TCP 443 as discussed above, also set "proto tcp-server" and "port 443").