Tinc VPN: Secure Private Network Between Hosts
This is as good a time as any to point people in the direction of WireGuard, Jason Donenfeld&#x27;s modernized VPN:<p>* It inherits strong, modern crypto from Trevor Perrin&#x27;s Noise  Protocol Framework.<p>* It&#x27;s designed to be extremely simple to configure for the common case.<p>* It has a microscopic trusted code base --- 4-5000 lines compared with hundreds of thousands for strongSwan --- and the protocol was specifically designed to enable that; for instance, the protocol makes specific allowances to enable implementations without any dynamic allocation.<p>* It&#x27;s probably the fastest available VPN.<p>You can only use it on Linux at the moment, but that will change this year.<p>WireGuard is so good people at my company spin up Vagrant images on their Macbooks to use it. Check it out:<p><a href="https:&#x2F;&#x2F;www.wireguard.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.wireguard.com&#x2F;</a><p>Benjamin Dowling and Kenny Paterson (a name you might be familiar with) just completed and published a formal analysis of WireGuard; the results are complicated (the eCK model WireGuard was proven under doesn&#x27;t contemplate separate key exchange and data transport phases) but here&#x27;s a TLDR from Kenny:<p><a href="https:&#x2F;&#x2F;twitter.com&#x2F;kennyog&#x2F;status&#x2F;955884665801445377" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;kennyog&#x2F;status&#x2F;955884665801445377</a>