What is the best vpn protocol to use for site to site on vyos?

We have been using OpenVPN for quite some time for about 20 sites around the globe (china, brazil, india, germany, sweden, UK, etc). A few months back we started to switch over to Wireguard and I will never look back. Stability on sites with “shaky” internet connections (Brazil & China) is a lot better. Performance is a lot better and CPU utilization a lot lower.

For some sites we initially had some quite “weird” problems (not being able to reach some web-sites, etc). They seem to be because path MTU discovery does not always work and we added the following option for the wireguard interfaces:
set firewall options interface wg01 adjust-mss '1380’

The configuration of wireguard tunnels is also extremely uncomplicated.

1 Like