news.volyx.in

Setting up a home VPN server with WireGuard (mikkel.hoegh.org)

616 points by mikl · 2540 days ago · 198 comments on HN

Article summary

The article provides a step-by-step guide on setting up a home VPN server using WireGuard, a relatively new VPN software that promises to simplify the complexities of OpenVPN and IPSec. The author explains the motivation behind setting up a home VPN server, including accessing home computers securely and browsing privately from insecure WiFi networks. The guide covers installing and configuring WireGuard on a RaspberryPi and setting up a client on macOS. The article also provides tips on configuring the server to act as a router and enabling IP forwarding.

Main themes

  • WireGuard setup and configuration
  • VPN performance and reliability
  • OpenVPN vs WireGuard
  • Network security and firewalls
  • Home networking and routing
  • VPN protocols and configurations

What commenters say

  • WireGuard is faster and more reliable than OpenVPN, making it a preferable choice for some users.
  • Some users prefer OpenVPN due to its wider range of features, despite WireGuard's simplicity and speed.
  • WireGuard may not be suitable for all use cases, particularly those that require advanced features or specific configurations.
  • The performance of WireGuard can be affected by various factors, including hardware offload, CPU usage, and network configuration.
  • Some users have experienced issues with WireGuard being blocked by firewalls or security gateways, while others have found it to be more reliable than OpenVPN.
  • The choice between WireGuard and OpenVPN ultimately depends on individual needs and preferences.
  • WireGuard's smaller codebase makes it easier to audit and more secure, but it may lack features that some users require.
  • WireGuard can be used with various protocols, including UDP and HTTP/3, to improve its performance and reliability.