3 ms·

> No love for tinc[1]? I actually looked into tinc, and really wanted to love it because of its simplicity. Unfortunately though, it seems that the developmen

by lenova 3y ago

> No love for tinc[1]? I actually looked into tinc, and really wanted to love it because of its simplicity. Unfortunately though, it seems that the development scene around it has been stalled for several years now, and benchmark reports show that it can't keep up with cloud speed tests when compared with Wireguard: - Wireguard: 390.3 Mbps - Netmarker: 369.3 Mbps - Tailscale: 62.5 Mbps - ZeroTier: 56.8 Mbps - Nebula: 38.4 Mbps - Tinc: 34.7 Mbps - OpenVPN: 22.3 Mbps Source: [disclaimer, article written by Netmaker CEO, so implicit bias] (https://medium.com/netmaker/battle-of-the-vpns-which-one-is-fastest-speed-test-21ddc9cd50db https://medium.com/netmaker/battle-of-the-vpns-which-one-is-...)

imiric 3y ago
Hhmm I don't remember it being that slow, but then again, I didn't need much throughput for my use cases. Frankly, I'm surprised that Zerotier and Tailscale are that slow as well, so I'm not sure how trustworthy that article is. I found this other benchmark[1] that places them much closer to native WG performance, with Netmaker still in the lead, and somehow faster than a direct connection. This is probably due more to Netmaker using the in-kernel WG, instead of the userspace implementation. I'm kind of curious to give it a try, TBH. :) Hell, even OpenVPN is _much_ faster than that[2,3]. Also, yeah, tinc development has been slow for years now, but I didn't experience any issues with the prerelease versions. It's certainly behind the times now, but I also enjoyed how easy it was to configure and use. [1]: https://techoverflow.net/2022/08/19/iperf-benchmark-of-zerotier-vs-netmaker-vs-tailscale-vs-direct-switched-connection/ https://techoverflow.net/2022/08/19/iperf-benchmark-of-zerot... [2]: https://www.zerotier.com/blog/benchmarking-zerotier-vs-openvpn-and-linux-ipsec/ https://www.zerotier.com/blog/benchmarking-zerotier-vs-openv... [3]: https://www.wireguard.com/performance/ https://www.wireguard.com/performance/
- BitPirate 3y ago
  Tailscale is using GSO/GRO now. They blogged about reaching the 10Gbit/s milestone. https://tailscale.com/blog/more-throughput/ https://tailscale.com/blog/more-throughput/
lenova 3y ago
Replying to my own comment as I can no longer edit it: The folks over at the Nebula team had an interesting discussion regarding the the "battle of the VPNs" article published by Netmaker I sourced in my parent comment: https://github.com/slackhq/nebula/discussions/911 https://github.com/slackhq/nebula/discussions/911

by lenova 3y ago

imiric 3y ago

Hhmm I don't remember it being that slow, but then again, I didn't need much throughput for my use cases. Frankly, I'm surprised that Zerotier and Tailscale are that slow as well, so I'm not sure how trustworthy that article is. I found this other benchmark[1] that places them much closer to native WG performance, with Netmaker still in the lead, and somehow faster than a direct connection. This is probably due more to Netmaker using the in-kernel WG, instead of the userspace implementation. I'm kind of curious to give it a try, TBH. :) Hell, even OpenVPN is _much_ faster than that[2,3]. Also, yeah, tinc development has been slow for years now, but I didn't experience any issues with the prerelease versions. It's certainly behind the times now, but I also enjoyed how easy it was to configure and use. [1]: https://techoverflow.net/2022/08/19/iperf-benchmark-of-zerotier-vs-netmaker-vs-tailscale-vs-direct-switched-connection/ https://techoverflow.net/2022/08/19/iperf-benchmark-of-zerot... [2]: https://www.zerotier.com/blog/benchmarking-zerotier-vs-openvpn-and-linux-ipsec/ https://www.zerotier.com/blog/benchmarking-zerotier-vs-openv... [3]: https://www.wireguard.com/performance/ https://www.wireguard.com/performance/

BitPirate 3y ago
Tailscale is using GSO/GRO now. They blogged about reaching the 10Gbit/s milestone. https://tailscale.com/blog/more-throughput/ https://tailscale.com/blog/more-throughput/

lenova 3y ago

Replying to my own comment as I can no longer edit it: The folks over at the Nebula team had an interesting discussion regarding the the "battle of the VPNs" article published by Netmaker I sourced in my parent comment: https://github.com/slackhq/nebula/discussions/911 https://github.com/slackhq/nebula/discussions/911