@hj Wireguard's advantage originally was modern CPU-friendly crypto (256-bit ChaCha20 with Poly1305 for MAC). Then it got a kernel module to make it really fast.
Well, since then OpenVPN has a kernel module now too. Plus it can do ChaCha20/Poly1305. And it still has AES-256-GCM with hardware acceleration.
OpenVPN turns out to be faster now *and* more flexible.
@Nux@matuzalem@stefano I just remembered my firewall (OpnSense) supports DCO now as it's based on FreeBSD 14, so I turned on OpenVPN and did tests compared to Wireguard over LTE
@matuzalem@stefano for the simplest uses cases it works great, no doubt.
But try to figure out how to automate deployment with users in LDAP and restrict access to the VPN by their group, for example. Wireguard isn't a good fit for something like that.
@stefano@matuzalem I don't know that Wireguard has that much of an advantage anymore, really. It's missing so many features that OpenVPN provides for managing a user and access control, injecting routes and stuff, etc.
You can't even complain about performance anymore as there is now a kernel module (OpenVPN DCO // data channel offload) that closes the performance gap
Wireguard just has a better default cipher and its network roaming feature but that's about it.
@hyperreal it's less suited to it than Nim and I've toyed with Nim briefly and think it's pretty straightforward for scratching some itches of mine but you're always fighting with a smaller ecosystem of libraries. I wanted an HTTP client I could embed and it was painful, depended on libcurl
It's hard to beat the rich ecosystem you'll have with Python so I think as long as you're doing things that don't need to pull in C/Rust based libs it should be possible to use the tools Doctor suggested
@Zennagain@Sherri_Ingrey I've been mad enough at stupid Dem things for a while I completely forgot how they refused to hold a primary to make Biden defend his presidency. That was a bad sign.
Theres also this where they got mad at the New Hampshire Dems and rejected their primary results because the NH dems didn't wait for daddy's approval before running it
The Dems haven't been held responsible and probably won't anyway
@polarisera@mastomememakers on the other hand, the economy and climate may force their hand in our lifetime. We did it once before. During the Dust Bowl we had 2.5 million Americans flee the plains for cities where they could find jobs
40% of the entire rural community in some areas vanished
@pervognsen@ahl I've been so angry at SIP and disappointed since it breaks DTrace. That's one feature I love having access to but when I run into something and really want to know what's happening I just move my dev environment into a FreeBSD jail so I can run DTrace on the software.