Hacker News Reader

Comment by xvector | Hacker News Reader

What are some reputable VPN services using WireGuard?

Check out mullvad.net

They are great. From Sweden and they are bunch of hackers. They helped pay for mullvad and working on their own clients. They were very early with supporting Wiregurad.

They also over tons of payment methods, including the ability to send them cash threw the post office.

https://www.azirevpn.com

I don't know if they're reputable, but I have used them in the past – mostly because they supported wireguard pretty early on.

I had no problems with bandwidth or connecting.

Mullvad supports Wireguard, it’s my VPN of choice.

iVPN does: https://www.ivpn.net/wireguard

PIA (Private Internet Access) is sponsoring Wireguard development: https://www.privateinternetaccess.com/blog/2018/09/the-curre...

Reputable or not, Nordvpn has been beta-testing it for a fair while (I emailed support and got a list of a few peers). It's been working well for me.

TorGuard runs test servers in 3 locations (NY, London and Singapore) since March, using from the start and had no problems.

Not answering the exact same question, but it’s fairly easy to set up on a cheap cloud VM as well.

Same here. Running of a $5/mo VPS and works fine. Wireguard is particularly helpful here, as I get about double the speed compared to openvpn (server-side CPU bottleneck).

AES-GCM uses way less CPU, should check it out. WG with ChaCha-Poly consumes 4-5 times less (hadn't done benchmarks though, I just have Bandwidth meter and CPU% on my taskbar in Linux side-by-side).

> AES-GCM uses way less CPU

It depends on if you have AES-NI (for AES) and PCLMULQDQ (for GCM), or similar features on non-x86 architectures. Without them, AES-GCM is usually much slower than Chacha-Poly.

Any ready to go setup instructions? For IPsec or OpenVPN it's a single bash script, hiding the complexity and the internal mess

e.g. https://github.com/hwdsl2/setup-ipsec-vpn

The good thing about WireGuard is that it doesn't really have any "complexity and [...] internal mess". A simple WireGuard setup with one client and one server has a 10-line configuration file on each side, with each side knowing their own private key and its peer's public key. I have not used WireGuard for the public VPN scenario, so I don't know if additional firewall rules are required to route traffic from VPN into the public internet, but I would guess as much.

From my limited experience of setting it up the complexity is not in the configs files (also not with OpenVPN as you usually just copy paste some template anyway) but in setting up the routing, iptables etc.

It's pretty easy; I suggest using wg-quick.

It is not safe yet to use as a VPN because of the way it is designed, see https://www.perfect-privacy.com/en/blog/wireguard-vpn-pros-a...

Reply on news.ycombinator.com