3 ms·
From a networking perspective, I'm looking most forward to route-based IPSec tunnels: https://man.openbsd.org/sec.4 https://man.openbsd.org/sec.4 On the Linux
by zdw 3y ago
From a networking perspective, I'm looking most forward to route-based IPSec tunnels: https://man.openbsd.org/sec.4 https://man.openbsd.org/sec.4
On the Linux side these are called "vti" devices, and they're simpler to use than most other methods, and also the default when interacting with cloud service providers IPSec gateways.
- dcow 3y agoWhat’s up with this seeming resurgence in interest in IPSec? Did Jason politically/socially mess up? Or are people realizing IPSec solves some novel problem outside the scope of WG?
- t-3 3y agoI think VPNs for general use are just increasingly popular as many people have privacy concerns, many governments are interested in or actively regulating internet speech, getting around geoblocking and copyright restrictions, etc. (not to mention, very aggressive advertising by commercial VPN providers). Remote working has probably increased use as well.
- accrual 3y agoI think it's great there is new attention to OpenBSD's IPSec stack. IPSec is still widely used and is the defacto VPN tech for many large corporations, even if wg is simpler and easier to deploy. IPSec tends to be built-in to enterprise routers, but I'm not sure if wg is.
- throw0101b 3y ago> What’s up with this seeming resurgence in interest in IPSec? IPsec is implemented on many/most network routers/firewalls, and so can be plugged into existing infrastructure perhaps.