Hacker News new | ask | show | jobs
by shifto 2383 days ago
I like my always-on IPsec tunnel on android. Never really understood this entire wireguard hype. Probably because VPN just got a bit easier for some people..?
3 comments

One of the big things is that it uses more common UDP rather than a completely new IP protocol like IPsec wants. This makes it play much nicer with a lot of networks that have unusual setups or restrictions that otherwise block IPsec. OpenVPN can also accomplish that, but it's got a more complicated setup than WireGuard since it needs a full TLS stack and certificates.
The primary hype is its speed, good defaults, and small code base making it easier for audits.
WireGuard can do always-on on Android.