WireGuard: "fast, modern, secure VPN tunnel"

Quote:

---

WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it plans to be cross-platform and widely deployable. It is currently under heavy development, but already it might be regarded as the most secure, easiest to use, and simplest VPN solution in the industry.

---

https://www.wireguard.io/

Linux-only for now, but you can get an OpenWrt-compatible router for less than $15.

It's for sure an attractive protocol. Some (good rep) VPN providers, such as Mullvad, are providing it. But it may have some inconveniences of which it is not much talked about. Refer for example to this article from Perfect Privacy blog (an other technically reputable VPN provider):

Quote:

---

Disadvantages of WireGuard

These promising advantages are offset by some serious disadvantages, which unfortunately do not make WireGuard suitable for with Perfect Privacy at the moment: (...)

Not usable without logs
WireGuard has is no dynamic address management, the client addresses are fixed. That means we would have to register every active device of our customers and assign the static IP addresses on each of our VPN servers. In addition, we would have to store the last login timestamp for each device in order to reclaim unused IP addresses. Our users would then not be able to connect your devices after a few weeks because the addresses would have been reassigned.

It is particularly important to us that we do not create or store any connection logs at all. Therefore, we cannot store the above registration and login data that would currently be required for WireGuard to operate.

(...)

---

The article ends in noticing that some of the features Perfect Privacy offers ("TrackStop", and "Neurorouting", a cool feature for sure, but very PP related), would no more be possible with WireGuard.

As Mullvad provides WireGuard and promises no log, it would be interesting to have their opinion about the WireGuard's "no nolog" antifeature.