[talk] VPNs: Choosing between OpenVPN and L2TP/IPsec

Sujit K M sjt.kar at gmail.com
Tue Apr 21 01:48:07 EDT 2015

Hi Ike

On Tue, Apr 21, 2015 at 9:11 AM, Isaac (.ike) Levy
<ike at blackskyresearch.net> wrote:
> On 04/20/15 13:49, Nikolai Fetissov wrote:
>> Ike,
>> Definitely go with OpenVPN for roaming users. It's just way easier
>> then anything else. Clients for all relevant platforms are free (use
>> tunnelblick on Mac: https://code.google.com/p/tunnelblick/), there's
>> even a free iPhone app. You would need to manage the certs and crls,
>> but that comes required with any of your contenders. OpenVPN at least
>> gives you a nice set of tools to do this with easyrsa. Use default
>> UDP transport. It's way faster then doing the same over TCP.
> Ah, but one slick trick I learned from a fine Op today: running an
> additional server on port 443/TCP is extremely useful for the road
> warrior thing...

I find tunnelblick to be very bad in slow networks. Ideally you should have
a list of other performance/power/support rather than just specific issues.
Might throw up more questions.

-- Sujit K M


More information about the talk mailing list