news
Serverspace Technologies in the UAE: Launch of Falconcloud
PV
Patrick Visser
July 18, 2022
Updated April 5, 2023

OpenVPN vs WireGuard: which VPN is better?

OpenVPN vs WireGuard: which VPN is better?

We compared two popular VPN protocols for you according to four criteria: encryption, performance, privacy and compatibility. At the end of the article you will find guides on how to set it up..

Encryption

OpenVPN uses the OpenSSL library, which includes many cryptographic algorithms. The code length is more than 70,000 lines.

WireGuard uses a fixed set of encryption algorithms. The code length is 4000 lines.

OpenVPN
WireGuard
User Data Protection
Perfect Forward Secrecy (PFS)
Perfect Forward Secrecy (PFS)
Transport Layer Protocol
UDP or TCP
UDP
Key derivation & Agreement
RSA, DSA, X25519, Ed25519, SM2, etc.
HKDF, Curve25519 for Elliptic-Curve Diffie-Hellman
Hashing
MD5, MD4, SHA-1, SHA-2, MDC-2, BLAKE2, etc.
BLAKE2, SipHash24
Encryption & Authentication
AES, Blowfish, Camellia, ChaCha20, Poly1305, DES, Triple DES, GOST 28147-89, etc.
ChaCha20, Poly1305 using AEAD RFC7539 construction, etc.

Table 1. Encryption algorithms comparison

Conclusion: OpenVPN is suitable as a corporate VPN because it has a flexible and more complicated encryption technology. WireGuard will be a suitable solution for private users. Both VPN protocols undergo independent audits, after which security errors are corrected.

Performance

To understand which VPN is faster, just look at two graphs.

Here are the results of the throughput test:
Bandwidth test

And here are the results of ping time test:
Ping measurement results

During the test, it was also noted that OpenVPN loads the CPU by 100%, while WireGuard turned out to be less demanding.

The conclusion is obvious: WireGuard has more bandwidth and less ping, so it wins this race. It also loads the CPU less, which is an additional advantage.

Privacy

WireGuard settings contain the users' IP addresses. This is not secure because it allows you to identify participants in the VPN connection.

OpenVPN does not require IP addresses, so it is considered more secure.

Compatibility

WireGuard is compatible with all mobile devices. It can be installed on Windows, Android, iOS and Linux. This VPN protocol is relatively young compared to its competitor. In the long run, we can expect the list of WireGuard installation options to expand.

OpenVPN is less mobile, but is suitable for most computer platforms. It can be used in Solaris, QNX, Maemo, FreeBSD, ChromeOS and Linux. Most often, OpenVPN is used to deploy it in routers, firewalls, etc.

Conclusion: OpenVPN is inferior to WireGuard in mobility, but has better compatibility with modern platforms.

Which VPN to choose?

Use WireGuard if:

  • you need a VPN for simple tasks (like accessing foreign websites);
  • ou need a fast connection. Suitable for file sharing.

Use OpenVPN if:

  • you need remote access to the company's corporate network;
  • you are concerned about privacy.

How to set up a VPN?

It's not difficult. Here are some instructions that may be helpful to you:

You might also like...

We use cookies to make your experience on the Serverspace better. By continuing to browse our website, you agree to our
Use of Cookies and Privacy Policy.