I mostly want to access my home media (samba, sftp or dlna) from my ios, android and windows clients; but of course lan access will likely be desired in the future.
I have tried a few versions with LEDE before the 18.06 release and had varing results
I really liked openConnect as it was easy to setup both the server and the clients. however when using it i would have alot of disconnection and performance problems.
Has anyone had a good experience with others (ease of setting up and good performance)? StrongSwan, wireguard (from my readings they dont have an ios or windows client), maybe there are other i dont know about.
I have had openVpn setup before however im currently trying to set it up again and having trouble getting it working (trying to follow this guide)
All good until section:
Server Cert - Generate VPN Server CSR
My personal recommendation: use Wireguard. Fast, really easy setup, excellent Linux & OpenWrt support, quite nice Android App and Windows client is on the way (https://tunsafe.com/) ... even it's not yet complete, it's much better than the other VPN solutions - IMHO.
In terms of ubiquitous operating system support, IPsec (strongswan) and OpenVPN probably win. IPsec comes in many flavours, making the initial setup a little harder, but it's often natively supported by the OS (e.g. iOS, blackberry and windows have native IPsec/ IKEv2 support; there is a free strongswan app for android and desktop linux isn't an issue anyways) and is relatively fast - OpenVPN has free clients for most operating systems, but tends to be significantly slower.
wireguard is interesting, but so far it hasn't been merged mainline yet, this means there's still a significant chance that it will have to be changed (in potentially incompatible ways) in order to meet the bar - and even then it will take 2-3 years until you can expect it (in a compatible fashion) to be present on every linux derived distro or android device, draw your conclusions from that regarding support for other operating systems.
I would like to recommend strongswan with IKEv2. Built in clients in many operating systems is a huge advantage for me. They are stable. And for example configuring iPhones via sending configuration profile via mail sometimes make life easier
I have using Strongswan. My client are Windows, iOS, Mac OS, Android, Linux.
Initially Strongswan configuration on server side is not too easy, but after, everything is working great.
Used this a long time ago for my initial v4 setup, which works the same for v5. I think the only problem was that i needed to build/get the full bridge tool version, instead of the busybox one, but not sure if thats the case anymore.
The v4 is in the official package repo and the v5 is in my feed.
PS: I personally use it via its own Softether Protocol and windows client, which was the fastest on my tests. Yet if a official Wireguard client comes out, i will try to switch, since Softether is quite the overkill feature wise, for just a simple VPN connection.
+1 for wireguard. Simple and a pleasure to use. The downsides are, as others have mentioned, that it's a relatively young project, with limited documentation and possibly subject to change (or to being found insecure, although that seems highly unlikely).
To look at it another way, troubleshooting can be difficult, since the kernel does everything transparently to the user, and there's no verbose / debug mode. But the plus side is that it just works, so you shouldn't need major troubleshooting (except on the routing side, which the documentation doesn't really cover in any significant way).
I love and vote for Wireguard, made a testrun on performance with iperf3, Wireguard server is my WRT32X with OpenWRT 18.01 , and its also the iperf3 server, on the other side, my MacPro 2013 which is connected via WireGuard to the WRT 32X, and iPerf3 runnign throught the WireguardTunel, client uses PSK function of Wireguard:
But I can understand, for those, who need wide compatibilty, chooses another VPN Type...for me, its fanatstic, I only have MacOS and Linux Machines running...and a Android Client...
If Im not wrong, I saw here somewhere in the OpenWRT Forum, somebody of the members, mentioning a VPN service that supports wireguard... if Im not wrong, its this one: https://mullvad.net/de/ ...but Im sure, there are more...
