Conversation

Notices

1. Embed this notice
   feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 01:49:06 JST feld
   Speedtest while on my local network, VPN through my firewall, back to my Speedtest server
   
   OpenVPN: 818mbps / 259mbps / 1m ping
   
   Wireguard: 738mbps / 232mbps / 3ms ping
   
   No VPN: 992mbps / 974mbps / 1ms ping
   
   Why is Wireguard now the slower VPN option? lol
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 01:53:11 JST feld

     in reply to
     a little miffed that upload takes such a beating over the VPN, that's a little odd to me.
   • Embed this notice
     narcolepsy and alcoholism :flag: (hj@shigusegubu.club)'s status on Saturday, 09-Nov-2024 01:53:14 JST narcolepsy and alcoholism :flag:

     in reply to
     @feld for every VPN there is a question - what are the settings and what device runs the software
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 01:56:11 JST feld

     in reply to

     • narcolepsy and alcoholism :flag:
     @hj Wireguard's advantage originally was modern CPU-friendly crypto (256-bit ChaCha20 with Poly1305 for MAC). Then it got a kernel module to make it really fast.
     
     Well, since then OpenVPN has a kernel module now too. Plus it can do ChaCha20/Poly1305. And it still has AES-256-GCM with hardware acceleration.
     
     OpenVPN turns out to be faster now *and* more flexible.
   • Embed this notice
     on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ (lain@lain.com)'s status on Saturday, 09-Nov-2024 01:56:19 JST on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ

     in reply to
     @feld huh, I thought wireguard was like twice as fast as openvpn
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 01:56:48 JST feld

     in reply to

     • on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ
     @lain there's a kernel module now to accelerate it called DCO (Data Channel Offload) and it's supported in Linux, OpenBSD, and FreeBSD.
     on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ likes this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 01:57:29 JST feld

     in reply to

     • on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ
     • :blank:
     @i @lain they didn't have to rewrite anything as much as "stop doing everything in userspace"
   • Embed this notice
     :blank: (i@declin.eu)'s status on Saturday, 09-Nov-2024 01:57:32 JST :blank:

     in reply to

     • on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ
     @lain @feld it was until they were forced by the industry to rewrite the slow parts
     ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 01:58:55 JST feld

     in reply to

     • on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ
     • Cheetah Meld
     @pingviini @lain good luck to them, but OpenVPN is much better from a configuration/management perspective.
   • Embed this notice
     Cheetah Meld (pingviini@pleroma.shunderdo.me)'s status on Saturday, 09-Nov-2024 01:58:57 JST Cheetah Meld

     in reply to

     • on-lain ✔ᵛᵉʳᶦᶠᶦᵉᵈ
     @feld @lain Very apropos
   • Embed this notice
     narcolepsy and alcoholism :flag: (hj@shigusegubu.club)'s status on Saturday, 09-Nov-2024 02:58:57 JST narcolepsy and alcoholism :flag:

     in reply to
     @feld wireguard is much easier to setup at least
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 04:32:28 JST feld

     in reply to

     • GNU/r000t
     @r000t there's a kernel module now that accelerates it. Has existed for a couple years now.
   • Embed this notice
     GNU/r000t (r000t@ligma.pro)'s status on Saturday, 09-Nov-2024 04:32:29 JST GNU/r000t

     in reply to

     @feld
     How the fuck did you get OpenVPN to go faster than 100mbit?!

   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 09-Nov-2024 04:33:53 JST feld

     in reply to

     • narcolepsy and alcoholism :flag:
     @hj yes, for the simple case it's 1000x easier