WireGuard

wikipedia:WireGuard is a free and open-source software application and communication protocol that implements virtual private network techniques to create secure point-to-point connections in routed or bridged configurations. It use Noise protocol framework, Curve25519, ChaCha20, Poly1305, BLAKE2, SipHash24 and HKDF.

Technical features:

• WireGuard is invisible to illegitimate peers and network scanners
• WireGuard use UDP port 41414.

• Curve25519 used for identified peers, using their public key, a 32-byte Curve25519 point

 $ sudo apt install wireguard

Included in March 2020 into the Linux Kernel 5.6

• NordVPN offers NordLynx built on WireGuard

WireGuard's encryption speed claims to be faster that IPsec group protocols.

• Debian packages: wireguard, wireguard-dkms, wireguard-tools

• MacOS: brew install wireguard-tools
• iOS: allows auto activation on WiFI based on SSID.

Commands

wireguard-go wg0
ip link add wg0 type wireguard

Author: Jason A. Donenfeld. Advisors: Trevor Perrin, Jean-Philippe Aumasson, Steven M. Bellovin, and Greg Kroah-Hartman

See also

• VPN: IPsec (Openswan), OpenVPN, Forticlient, GlobalProtect (PAN-OS), WireGuard (Linux Kernel), Tailscale, PulseSecure, WebVPN, SoftEther, ESP, IKE, AWS VPN, Zerotier, VPN client, Pritunl, GCP Cloud VPN, Mesh virtual private network, Mullvad
• Edge Security LLC

https://www.wireguard.com/papers/wireguard.pdf

https://www.wireguard.com/papers/wireguard.pdf