What are people’s opinions on Softether VPN? It’s a free VPN solution that offers just about all VPN protocols. I’m looking to spin it up for a couple businesses.
There’s at least one company, that I won’t name, who seem to have an MSP friendly product based off the back of Softether, so they must think it’s fine. Personally I was a little underwhelmed with it and would rather just run a more well known solution be it opensource or commercial.
I use it for pretty much all my client VPN needs. Great product with a ton of flexibility. Easy to set up after you figure out a few tricky spots. I have my lowest level techs set it up from scratch no problem now. Has AD integration for username password you can do virtual DHCP and create a different scope for the VPN users to use.
It’s actually not that bad. I’d say it’s my favorite method of implementation when there’s no native options or they cant afford to pay for the vpn licenses (i.e. Sonicwall’s SSLVPN two session limit is BS if you ask me)
Why not just wireguard?
What are the firewalls at the businesses? I’m not sure of a firewall that doesn’t include a VPN option.
I’ve used it before in a couple on non-standard cases. My biggest concerns have always been the lack of support and small user base.
Please describe your use case
We’ve used it several times in production for the transparant VPN tunnels. Those are amazing. and haven’t found any proper easy way to set it up with any other vpn solution.
I’ve used Softether for years. It is a very fast and secure multiprotocol open source VPN, many times faster than OpenVPN. I think it is very underrated for it’s performance and flexibility. It is easy to implement on many platforms including Windows, Linux, MacOS, Raspberry Pi and so on.
It works great in as a standard multiprotocol remote access VPN and shines as a site to site VPN particularly as a layer 2 bridge where video multicasting or other services that are blocked in a typical routed connection are needed. That’s where it gets its name - Softether is like a secured Ethernet cable stretching across the Internet between sites. There are controls to filter DHCP and other services if there is a local DHCP server too.
Softether has all kinds of features (such as high availability, tunneling via SSL, DNS and Ping) under the hood and is well documented. I would suggest you study up on it’s capabilities https://www.softether.org/
You should take a look at what kind of traffic softether sends. Why is there traffic going to china? I understand the product was developed in japan but come on.
I’ve used it before and it works, but I generally prefer OpenVPN.
Haven’t used softether, but I use RRAS with server 2008 r2 and up. SSTP implementation with client certificates and NAP.
I have tried rolling out VPNs using Softether & UBNT routers.
Check out ZeroTier - it just works, low cost, open source, decent performance, etc
Windows 10 has a native ipsec client
lol you talking about iQuila?
Yea, even openvpn has a 2 person limit, and their commercial licenses are 10 bucks a pop I think… Per year I think…
The licenses cost like $50 bucks one time and can be transferred to new devices. Seems pretty reasonable to me.
We ruled out wireguard because it didnt natively run a windows back end. We dont have enough linux competency to split our focuses for a single product.
yea, why not? Why not use an unfinished product?