VPNs

[Squarewave]

If I were to set up a VPN to get into my home network from the outside, which protocol am I best to use?

Options on the desktop settings I see are;

PPTP
L2TP over IPSec
IKEv2 EAP
IPSec Tunnel
SSL VPN Tunnel

Mobile client lists;

SSL
OpenVPN

I wonder which is best to choose?

Thanks.

[madires]

PPTP is an absolute no-go. L2TP over IPsec doesn't make much sense as you could use IPsec directly. IKEv2 EAP is not a VPN, it's used for authentication to establish an IPsec connection. The best options from the ones listed are IPsec or SSL VPN. OpenVPN is an SSL VPN. BTW, another good option is WireGuard.

[Halcyon]

OpenVPN or Wireguard.

I currently use OpenVPN, but I'm also testing Wireguard for site-to-site... I like its simplicity.

With OpenVPN, don't use any of the encryption or digest algorithms that have been deprecated in later versions of OpenSSL, see: https://docs.netgate.com/pfsense/en/latest/releases/23-09.html#weak-certificate-digests-such-as-sha1-are-deprecated