[wink]

It's been a while but e.g. with OpenVZ containers you couldn't do anything in the kernel, i.e. Wireguard.

I don't have access to that VPS anymore, but I was already using Wireguard but had to use OpenVPN here, so I can't tell you if this is still a widespread problem or a historical curiosity.

Also sometimes, especially cross-organization, the chance that OpenVPN is already in use is much higher (if they're not doing Open/StrongSWAN anyway).

[martheen]

It depends on the OpenVZ kernel, some later version can use WG. But OpenVZ is dying anyway so if someone use a still supported container technology, WG is probably available.

Depending on the ISP setup, sometimes WG can be less reliable due to MTU and/or UDP filtering, I remember an ISP from years ago where WG don't work only on certain hours, while OpenVPN running on the same server still work.

[Jnr]

Wireguard can run in userspace mode if the kernel module is not available.

Changing the MTU for Wireguard to 1280 usually helps a lot with reliability and throughput.