Why Wireguard?
It is a protocol, not a product; a single vendor going bankrupt does not ruin your SDWan setup.
Robust; one of the few products that can deal with Double NAT. When dealing with work-from-home users you don’t have the option to just fix it.
SSO options; auto sign-on when user logs into Micro$oft or Google. No extra password to remember, no extra step
BiDirectional; The office can reach the PC to make sure it’s updated or check the logs
Maximum versatility; Installs on the most OS’s (read ChromeOS) , some versions support ACLs, DNS etc<\/p>\n\n\n\n
Tailscale; Saas https:\/\/tailscale.com easiest solution as its already setup for you. but $. M$ + Google sso<\/p>\n\n\n\n
PriTunl; supports multiple Groups and users can be members of multiple groups, Multi-Tennancy, 2FA
tried to install on Ubuntu 22; no support for mongodb-org yet
supported on Ubuntu 20.04
Install is easy; a half dozen lines of code pasted into ssh
<\/p>\n\n\n\n
NetBird; M$ + Google sso, 2FA, but very new, very Beta<\/p>\n\n\n\n
NetMaker; multiple networks and groups. Google, Github, Open ID Connect (OIDC) and M$ sso via OAuth. Ubuntu 20.04
Error when trying to install:
ERROR: for caddy Cannot start service caddy: failed to create shim: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error mounting “\/root\/Caddyfile” to rootfs at “\/etc\/caddy\/Caddyfile”: mount \/root\/Caddyfile:\/etc\/caddy\/Caddyfile (via \/proc\/self\/fd\/6), flags: 0x5000: not a directory: unknown: Are you trying to mount a directory onto a file (or vice-versa)? Check if the specified host path exists and is the expected type<\/p>\n\n\n\n
FireZone; Google + Okta sso M$ sso needs to be configured thru generic sso<\/p>\n\n\n\n
SubSpace; cool name but out of date<\/p>\n\n\n\n
<\/p>\n\n\n\n
Hamachi, ZeroTier, OpenVpn, are NOT WireGuard and don’t have it’s advantages<\/p>\n\n\n\n
Options here https:\/\/medium.com\/swlh\/web-uis-for-wireguard-that-make-configuration-easier-e104710fa7bd<\/p>\n","protected":false},"excerpt":{"rendered":"
Why Wireguard? It is a protocol, not a product; a single vendor going bankrupt does not ruin your SDWan setup. Robust; one of the few products that can deal with…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2295","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2295"}],"version-history":[{"count":11,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2295\/revisions"}],"predecessor-version":[{"id":2313,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2295\/revisions\/2313"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}