Best VPN?

[patm95]

Hi all.  I was just wondering what the consensus was for the best VPN to use for remote access to files and such?  Currently I use OpenVPN.  Although it still works, it seems like the docker is no longer supported.  I was wondering what everyone else uses?  Are most people using wireguard?  I see that my Asus router has OpenVPN which can be enabled on it.  Is that a good option? 

 

I see wireguard requires a port forwarding on the router.  I've always heard that this lives you vulnerable to attacks?

 

Thank you.

[itimpi]

On 9/3/2021 at 8:53 PM, patm95 said:

Hi all.  I was just wondering what the consensus was for the best VPN to use for remote access to files and such?  Currently I use OpenVPN.  Although it still works, it seems like the docker is no longer supported.  I was wondering what everyone else uses?  Are most people using wireguard?  I see that my Asus router has OpenVPN which can be enabled on it.  Is that a good option? 

 

I see wireguard requires a port forwarding on the router.  I've always heard that this lives you vulnerable to attacks?

 

Thank you.

Forwarding a port only leaves you vulnerable to attack on that port so it only matters if the application on that port is itself compromised.  OpenVPN running on Unraid also requires a port forward so WireGuard is no different in that regard.   What you must not do is forward any ports to an application that is not itself secure, but one assumes that both WireGuard and OpenVPN are secure applications hardened against attack.

 

If your router supports openVPN then that is normally a perfectly acceptable alternative.   It has the advantage of meaning that you do not require any other device other than your router on your LAN to be functional to be able to access any device on the LAN.   This of course assumes that your router itself is not vulnerable to attack.

[patm95]

On 9/5/2021 at 12:19 AM, itimpi said:

Forwarding a port only leaves you vulnerable to attack on that port so it only matters if the application on that port is itself compromised.  OpenVPN running on Unraid also requires a port forward so WireGuard is no different in that regard.   What you must not do is forward any ports to an application that is not itself secure, but one assumes that both WireGuard and OpenVPN are secure applications hardened against attack.

 

If your router supports openVPN then that is normally a perfectly acceptable alternative.   It has the advantage of meaning that you do not require any other device other than your router on your LAN to be functional to be able to access any device on the LAN.   This of course assumes that your router itself is not vulnerable to attack.

Thank you for this.  It had been so long since I had setup OpenVPN that I had not remembered forwarding that port.  My router rarely gets updates anymore from Asus.  I wonder how secure OpenVPN would be from the router?  Do you see Wiregaurd as the most formidable setup for Unraid?

[itimpi]

10 hours ago, patm95 said:

Thank you for this.  It had been so long since I had setup OpenVPN that I had not remembered forwarding that port.  My router rarely gets updates anymore from Asus.  I wonder how secure OpenVPN would be from the router?  Do you see Wiregaurd as the most formidable setup for Unraid?

The big advantage of WireGuard over OpenVPN is that it is running even when the UnRaid array is not started.