What is the most significant advantage of the WireGuard over OpenVPN that comes to your mind?

Mesh is also the greatest advantage for me.

The second is the speed / lower cpu usage and the third the fast connection time. The last one for me is that even if „always on“ it only establishes a connection whenever you need it. Only if you try to connect to one IP on the remote site. As long as you don’t try to reach anything it won’t hold the connection alive which is great on mobile devices (OpenVPN keeps the connection alive all the time which drains your battery really fast) but this only is true as long as you don’t set persistent keepalive (which doesn’t makes sense for mobile devices anyway)

Wireguard allows you to build a mesh, where every peer can connect to each other.

You could do the same thing with some complicated OpenVPN deployments. OpenVPN does have a point-to-point mode, and you could combine a bunch of point-to-point tunnels to build a mesh.

Wireguard is a lot easier, faster and better in other ways. So I am not suggesting that anyone should try building a mesh in OpenVPN. Just saying it is possible.

The mesh. I had no idea. This is absolutely exciting indeed.

Tailscale is absolutely amazing

Maybe I’m missing something in what you said, but with OpenVPN the clients can still connect to each other. It might not be as easy to configure, but mesh is possible. My OpenVPN clients can connect to each other. I have mine set up that way (in addition to Wireguard which I like much better)

Im very interested in the mesh part. How is that done? Would I have multiple wg interfaces? One per peer?

Is there a way to dynamically configure these?

I’m aware of tailscale and headscale. Arr those what you mean by meshing?

Thanks :blush:

That’s interesting. Anybody has any good resources or tutorial to this topic? E.g. how to connect 3 small servers in various locations around the globe in a mesh? (don’t want to use Tailscale)

That’s a very interesting one and one of those posts I was hoping for. Thank you.

Why would a cruise ship intentionally try to sabotage VPN usage?

I have yet to run into a scenario where Wireguard works and OpenVPN does not. I more commonly see the second scenario - Wireguard does not work and OpenVPN does. This is the reason why I continue to run both.

I’m loving all of those, thank you.

You have confirmed the speed increase, lots of users claimed the same so it must be the thing, very nice.

Great observation, that would be very important to me as well. I’m hating the fan noise and I’m always investigating when it happens too much.

Wow. That’s a wholesome example of how robust WG is. And yes, I noticed that OpenVPN tends to slow things down a lot for me. This is one of those core reasons I started to look for an alternative.

I appreciate this one but still, I would prefer personal opinion of the users, just something less obvious that the article doesn’t cover. I’m sure there might be not just pros but also cons to consider, etc.

That’s another amazing fact I never thought of. Thanks!

Never thought of it… brilliant, thanks!

I wouldn’t say that is wireguard specific, any VPN container can do that.

Such an amazing reply, far beyond of what I expected to read. Thanks a ton for explaining your case in details. Pretty useful and great food for thought.

So faster and less resources hungry. And the connection-less design also sounds brilliant.