Your own VPN with OpenIKED & OpenBSD
reddit / BSD

----------------------------------------------------------------------
BumpitySnook · 2018-06-05 19:58

An alternative: https://marc.info/?l=openbsd-
ports&m=152712417729497&w=2

----------------------------------------------------------------------
e02ea3c3450d441 · 2018-06-05 20:39

Won't work since Kernel support is missing

----------------------------------------------------------------------
BumpitySnook · 2018-06-05 22:18

Maybe "we now have a release that fully supports OpenBSD" means
something different to you than me?

----------------------------------------------------------------------
e02ea3c3450d441 · 2018-06-06 17:20

That concerns the userland part of wireguard. The kernel is still
missing. Cmp [https://marc.info/?l=openbsd\-
ports&m=152700789031579&w=2](https://marc.info/?l=openbsd-
ports&m=152700789031579&w=2)

----------------------------------------------------------------------
BumpitySnook · 2018-06-06 20:44

The userland software under discussion is a fully functioning,
complete port, employing the kernel tun/tap devices.

A kernel port of wireguard would be a *performance* enhancement, but
does not change the featureset supported by wireguard on OpenBSD.  And
arguably a userspace implementation is more secure than putting
additional code in the kernel — isn't OpenBSD all about that kind of
tradeoff?

Does that make sense?

----------------------------------------------------------------------
jaydoscher · 2018-06-10 18:39

The article is clearly written, but it has some issues.  I'll admit
I'm trying to use Windows 10 clients, but I can't even get iked to
start.