Presented by Jason A Donenfeld FOSDEM 2017

Recommendations

Info

Easily Auditable OpenVPN Linux XFRM StrongSwan SoftEther WireGuard 116,730 LoC Plus OpenSSL! 13,898 LoC Plus StrongSwan! 405,894 LoC Plus XFRM! 329,853 LoC 3,904 LoC Less is more.
Easily Auditable IPsec (XFRM+StrongSwan) 419,792 LoC SoftEther 329,853 LoC OpenVPN 116,730 LoC WireGuard 3,904 LoC
Page 1 and 2: Presented by Jason A. Donenfeld FOS
Page 3: What is WireGuard? ▪ Layer 3 secu
Page 7 and 8: Blasphemy! ▪ WireGuard is blasphe
Page 9 and 10: Cryptokey Routing PUBLIC KEY :: IP
Page 11 and 12: Cryptokey Routing User space send()
Page 13 and 14: Cryptokey Routing ▪ Makes system
Page 15 and 16: Demo
Page 17 and 18: Simple Composable Tools: wg-quick
Page 19 and 20: Namespaces: Containers # ip addr 1:
Page 21 and 22: Static Allocations, Guarded State,
Page 23 and 24: Solid Crypto ▪ ▪ ▪ ▪ ▪
Page 25 and 26: The Key Exchange ▪ In order for t
Page 27 and 28: The Key Exchange ▪ Very limited s
Page 29 and 30: Timers User space sends packet. •
Page 31 and 32: Denial of Service Resistance ▪ Ha
Page 33 and 34: Cookies: DTLS-like and IKEv2-like
Page 35 and 36: Cookies: The WireGuard Variant ▪
Page 37 and 38: Cookies: The WireGuard Variant ▪
Page 39 and 40: Performance: Measurements Bandwidth
Page 41: More Information WireGuard ▪ Main

Presented by Jason A Donenfeld FOSDEM 2017

Create successful ePaper yourself

Delete template?

Save as template?