undefined | Better HN

0 pointsdsacco8y ago0 comments

For what it’s worth, this only really applies to a comparison against OpenVPN or IPSec. WireGuard has similar code complexity and size, and is approximately the same when compared against the incumbent VPN options.

0 comments

zokier8y ago

I don't think the comparison to Wireguard is apples-to-apples. Wireguard implements it's own semi-custom cryptosystem (Noise) whereas subnet rides on top of Go standard TLS implementation. So depending on how you view things, Wireguard is either much simpler (if you compare to the whole TLS stack) or much more complex (if you assume Go TLS to be reliable/trustworthy)

zx2c48y ago

Maybe I misunderstood your comment, but WireGuard is less than 4k LoC, which is a few orders of magnitude smaller than OpenVPN or IPsec.

dsaccoOP8y ago

Yep you misunderstood, I was saying WireGuard has similar code complexity to the Go VPN implementation linked here :)

j / k navigate · click thread line to collapse