Hacker News new | ask | show | jobs
Building Your Own Dedicated IPSEC VPN in Less Than 10 Minutes (danielmiessler.com)
26 points by hwdsl2 2782 days ago
3 comments

If your intention is to build a secure IPSEC VPN, Algo is highly recommended [0]

[0] https://github.com/trailofbits/algo

I haven't needed it, but Streisand looks very nice.

https://github.com/StreisandEffect/streisand

Why not use WireGuard?
Because Wireguard requires compiling either a custom kernel or a kernel module, Wireguard isn't available on all platforms, configuration of Wireguard for advanced configurations means needing knowledge of how to script network configuration on your client platform versus more advanced ipsec clients have configuration knobs for many more use cases and Wireguard has characteristics that don't make it a good of a fit for some use cases especially ones that involve dynamic routing.
Algo also deploys wireguard