> I imagine these solutions are popular because they are more likely to function through corporate firewalls, where IPsec might be blocked. I implement IPSec a

> I imagine these solutions are popular because they are more likely to function through corporate firewalls, where IPsec might be blocked. I implement IPSec at work, because we need the real deal. Though for my personal projects, my infra is using OpenVPN. The reason is simple: it's so much easier to configure and understand, and the desktop clients are usually more modern and stable. With IPsec, there's always these plethora of extensions and subtleties that each client will support or not. Clients will support Cisco IPsec but will bug with strongswan, strongswan clients will not play well with windows, Android client will not support IKEv2, etc etc etc. From my experience, there's a lot of "finding the right client for the right setup for each platform" with IPsec. For OpenVPN, usually the native windows/Linux(NM) clients will work out of the box, which is a much better experience than a third party client. As for TLS VPNs being more prone to vulnerabilities, that does not scare me all that much, since there's always SSH behind the VPN anyway, so it's usually "good enough" for non corporate security.