Community discussions

 
jimint
just joined
Topic Author
Posts: 10
Joined: Fri Aug 11, 2017 12:58 am

Best VPN for Mikrotik Router

Tue Oct 08, 2019 8:35 am

Hello
Please can someone tell me about which is the best VPN company (IPVanish-NordVPN-ExpressVPN etc.) for mikrotik setup?
 
erlinden
Member Candidate
Member Candidate
Posts: 174
Joined: Wed Jun 12, 2013 1:59 pm

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 12:22 pm

What is your definition of "the best"?
 
User avatar
Lifz
newbie
Posts: 43
Joined: Tue Feb 26, 2013 1:05 pm

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 12:44 pm

BestVPN is one you make yourself, host CHR somewhere and use native Mikrotik protocols (EoIP, IPIP, etc.)
Generally avoid TCP based protocols (SSTP, OpenVPN) for performance reasons (single TCP connection), always prefer UDP ones (PPTP, L2TP,...).

Obviously it all depends on what you are trying to do.
 
User avatar
xvo
Long time Member
Long time Member
Posts: 595
Joined: Sat Mar 03, 2018 1:12 am
Location: Moscow, Russia

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 12:47 pm

BestVPN is one you make yourself, host CHR somewhere and use native Mikrotik protocols (EoIP, IPIP, etc.)
True.
 
User avatar
IPANetEngineer
Trainer
Trainer
Posts: 1053
Joined: Fri Aug 10, 2012 6:46 am
Location: Jackson, MS, USA
Contact:

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 4:37 pm

This often depends on what the clients will be...

Phones, Laptops, servers, firewalls??

You also need to consider the type of Internet connection the clients will be coming from - in some cases, TCP/443 behind NAT is all you are allowed to use.

UDP based VPNs are great if they meet the requirements listed above, if not, then select a VPN for connectivity first, then performance.
Global - MikroTik Support & Consulting - English | Francais | Español | Portuguese +1 855-645-7684
https://iparchitechs.com/services/mikro ... l-support/ mikrotiksupport@iparchitechs.com
 
pe1chl
Forum Guru
Forum Guru
Posts: 5923
Joined: Mon Jun 08, 2015 12:09 pm

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 6:05 pm

I think he is (like most new users) not looking for a VPN in the traditional meaning (to make a virtual network between two routers he is both managing), but the "new meaning" of "route all my internet traffic to some more-or-less trusted party who will route it to internet, instead of doing that directly via my ISP".
This really only makes sense when done from endpoint devices (like a PC or Phone), but for some reason people want to do that from their router too.
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1110
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 6:59 pm

If they support L2TP and will happily give you a username, password and IPSEC key then they should be fine.
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
pe1chl
Forum Guru
Forum Guru
Posts: 5923
Joined: Mon Jun 08, 2015 12:09 pm

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 7:13 pm

If they support L2TP and will happily give you a username, password and IPSEC key then they should be fine.
Yeah, but that is less and less popular for that kind of service. They move towards IKEv2, OpenVPN, Wireguard etc.
 
User avatar
IPANetEngineer
Trainer
Trainer
Posts: 1053
Joined: Fri Aug 10, 2012 6:46 am
Location: Jackson, MS, USA
Contact:

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 8:39 pm

Now that OpenVPN has UDP support in ROSv7, I expect we'll see a large migration to that once ROSv7 is prod and stable.

We've scaled OpenVPN to more than 100,000 clients with MikroTik for IoT solutions....it works really well
Global - MikroTik Support & Consulting - English | Francais | Español | Portuguese +1 855-645-7684
https://iparchitechs.com/services/mikro ... l-support/ mikrotiksupport@iparchitechs.com
 
Sob
Forum Guru
Forum Guru
Posts: 4806
Joined: Mon Apr 20, 2009 9:11 pm

Re: Best VPN for Mikrotik Router

Tue Oct 08, 2019 9:08 pm

I wouldn't celebrate yet, there's udp in v7, but it wasn't the only missing feature. So it's great step for own use, but not much changed for interoperability with someone else's service using standard OpenVPN.
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
jaytcsd
Member Candidate
Member Candidate
Posts: 288
Joined: Wed Dec 29, 2004 9:50 am
Location: Pittsboro IN
Contact:

Re: Best VPN for Mikrotik Router

Thu Oct 10, 2019 7:05 am

Since v7 and Spinrite 6.1 seem to be a long way off, what is a good secure Mikrotik to Mikrotik VPN that also lets road warriors in, or are we talking 2 different situations?

thanks
 
pe1chl
Forum Guru
Forum Guru
Posts: 5923
Joined: Mon Jun 08, 2015 12:09 pm

Re: Best VPN for Mikrotik Router

Thu Oct 10, 2019 11:30 am

For roadwarrior clients I normally use L2TP/IPsec.
A single IPsec PSK is shared between all clients and each client has a username/password.

Of course when you want you can add the extra complexity of using certificates, and/or maybe IKEv2.
 
User avatar
IPANetEngineer
Trainer
Trainer
Posts: 1053
Joined: Fri Aug 10, 2012 6:46 am
Location: Jackson, MS, USA
Contact:

Re: Best VPN for Mikrotik Router

Thu Oct 10, 2019 4:10 pm

I wouldn't celebrate yet, there's udp in v7, but it wasn't the only missing feature. So it's great step for own use, but not much changed for interoperability with someone else's service using standard OpenVPN.
We've been able to interop with non-MikroTik OpenVPN linux builds. It takes a little work but is completely doable.
Global - MikroTik Support & Consulting - English | Francais | Español | Portuguese +1 855-645-7684
https://iparchitechs.com/services/mikro ... l-support/ mikrotiksupport@iparchitechs.com
 
pe1chl
Forum Guru
Forum Guru
Posts: 5923
Joined: Mon Jun 08, 2015 12:09 pm

Re: Best VPN for Mikrotik Router

Thu Oct 10, 2019 4:25 pm

The question is more: is it interoperable with existing OpenVPN server deployments as they are commonly made, without server-side changes.
Until then, there will be issues when connecting to servers that are outside your own control for management/configuration.
It would be best when MikroTik just used the existing OpenVPN code, as far as that is possible w.r.t. licensing.

Who is online

Users browsing this forum: No registered users and 120 guests