Over the past couple years I have been running mostly OpenVPN.
I have an Synology 1522+ that has been running the OpenVPN instance for a while now. The only thing I dislike about it, is that after a year, I have a certificate renew for my “Synology given” DDNS that is used in the configuration… (I’m attempting to look into setting up a self hosted DDNS solution somehow…)
I got to thinking and maybe a Wiregaurd instance on a separate intel NUC would perform better? (The NUC runs proxmox so I would load Wiregaurd in an LXC). What are y’all’s thoughts on that?
I have a laptop with proxmox and I run pfsense on it with both openvpn and wireguard. Wireguard seems to perform better. By the way I replaced the router with that laptop so that I save some energy costs.
For about a year I’ve been using soft ether on a server 2008 vm. Since we switched isp and the isp providing only ipv6 it no longer works and has just been running in the background for a little over 5 months now. Still restarts and backs up every week but I can’t get it to work
Wireguard in a virtual machine. I’m planning to move to OpenVPN soonish though because you can link it with SAML IAM systems and authenticate automatically with SSO, which is cool. Speed isnt an issue for me, I’ll keep the wireguard tunnel as a backup though just in case.
These days I just use Guacamole with ADFS federation and Entra MFA. Site to site I haven’t needed in a while but like #1 posted, GRE over IPSEC to do dynamic routing (I have a mikrotik so this works best).