LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   OpenVPN in Ubuntu? (https://www.linuxquestions.org/questions/linux-networking-3/openvpn-in-ubuntu-4175735776/)

JASlinux 04-07-2024 11:35 AM

OpenVPN in Ubuntu?
 
Ubuntu supports PPTP builtin, but OpenVPN installation instructions look formidable. Is there any easy way to install Ubuntu OpenVPN?

https://ubuntu.com/server/docs/service-openvpn

Turbocapitalist 04-08-2024 03:55 AM

Quote:

Originally Posted by JASlinux (Post 6494671)
Ubuntu supports PPTP builtin, ...

(I would have expected much better from them. PPTP is almost worse than nothing, or maybe it actually is worse.)

OpenVPN is doable, but as you see there are more steps than with Wireguard,

https://ubuntu.com/server/docs/wireg...n-introduction

https://www.digitalocean.com/communi...n-ubuntu-20-04

Many would also say that Wireguard is an improvement over OpenVPN. So I would recommend considering Wiregaurd instead of OpenVPN, if you have no pressing reasons to use OpenVPN.

There is also StrongSwan.

What are your general goals with a VPN? What kind of networks are you planning on connecting?

JASlinux 04-08-2024 07:21 AM

Quote:

Originally Posted by Turbocapitalist (Post 6494794)
Many would also say that Wireguard is an improvement over OpenVPN.

Can you put your understanding in general terms?

Quote:

What are your general goals with a VPN? What kind of networks are you planning on connecting?
To spare Ubuntu, I think PPTP-only builtin is the same with Microsoft & I know it is in Android.

Esoteric is the reason why later alternatives are safer.

So, as I user I was convinced OpenVPN is significantly more secure. I seek it when available. I can use it installed in another distro but I am leaning more on Ubuntu now.

OpenVPN is more common than Wireguard & StrongSwan but good to know what's out there.

Perhaps I should look for a distro with it builtin, but common utilities should be available everywhere.

I basically need user-oriented XFCE & not too bloated.

I am connecting to networks supporting PPTP or OpenVPN.

Turbocapitalist 04-09-2024 01:21 AM

Quote:

Originally Posted by JASlinux (Post 6494824)
Can you put your understanding in general terms?

Wireguard has a much, much smaller code base. Thus all even if all other factors were equal, that is an advantage because if code is not there it cannot break. There is even an implementation baked into OpenBSD base, which speaks a lot to the auditability and clarity. There are ports for Android and MacOS too.

Last I checked, Wireguard has defaulted to stronger algorithms. In the case of proprietary competition, last I checked, most did not even offer those stronger algorithms as an option.

On the usage side, setup is much simpler, as you can see from the guides.

The connection process is apparently simpler, thus faster and less error prone.

Apparently it transfers data faster than the others.

Don't take my word for it though. Unlike m$ products, it is allowed to evaluate and benchmark this software so you can find many reviews and guides out there.


Quote:

Originally Posted by JASlinux (Post 6494824)
Can you put your understanding in general terms?
To spare Ubuntu, I think PPTP-only builtin is the same with Microsoft & I know it is in Android.

Esoteric is the reason why later alternatives are safer.

PPTP, like other m$ services, insecure by design:

https://www.schneier.com/academic/ar..._of_mic_1.html
https://www.schneier.com/academic/ar...is_of_mic.html

Notice those posts are from the 1990s. L2TP is basically just a name change and just about as burdened with security hole.

JASlinux 04-09-2024 01:58 AM

There is a Ubuntu repository package called network-manager-openvpn I have installed, but I am not seeing the OpenVPN option in settings, still just PPTP.

two versions for Xubuntu:

network-manager-openvpn
network-manager-openvpn-gnome

I assumed the first is the right one.

JASlinux 04-09-2024 02:34 AM

Quote:

Originally Posted by Turbocapitalist (Post 6494946)

On the usage side, setup is much simpler, as you can see from the guides.

Simpler is definitely a plus. It is always simpler to use PPTP than OpenVPN, but the extra work involved is logical.

pan64 04-09-2024 03:14 AM

Quote:

Originally Posted by JASlinux (Post 6494955)
Simpler is definitely a plus. It is always simpler to use PPTP than OpenVPN, but the extra work involved is logical.

You misunderstood. Wireguard is much simpler than OpenVPN.
PPTP is deprecated.


All times are GMT -5. The time now is 01:34 AM.