Testing Helpers

See debug.mk for easy testing deployment tricks via make remote-run, as well as netns.sh via make test and make remote-test for local and remote testing in network namespaces. The contrib/ directory also has various scripts and wrappers for easing testing.

Performance Roadmap

In theory WireGuard should achieve very high performance. There are still a few things to be done for that to happen:


These benchmarks are old, crusty, and not super well conducted. In the intervening time, WireGuard and IPsec have both gotten faster, with WireGuard stil edging out IPsec in some cases due to its multi-threading, while OpenVPN remains extremely slow. It is a work in progress to replace the below benchmarks with newer data.

Testing configuration