WireGuard Is Still Looking Good As A Linux VPN Tunnel

We've been talking about WireGuard for months and it's hoping to go mainline in the Linux kernel this calendar year. Earlier this month at FOSDEM was a status update on the project.

WireGuard lead developer Jason Donenfeld presented on this project that he's been developing over the past year. For those that haven't been following WireGuard up to now, this VPN tunnel is implemented in less than four thousand lines of kernel code, is designed to be very secure, keeps track of minimal state, has a minimal attack surface, provides a solid crypto base, is designed to be very performant, and has other benefits.

Benchmarks presented at FOSDEM show WireGuard has much greater bandwidth while lower ping times than IPSec with AES or ChaPoly as well as OpenVPN.

If you are interested in this next-gen VPN approach for Linux, the video recording is now available along with the PDF slides. Those wishing to learn more about the project can visit wireguard.io.