Page 1 of 1

Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 8:35 am
by jimint
Hello
Please can someone tell me about which is the best VPN company (IPVanish-NordVPN-ExpressVPN etc.) for mikrotik setup?

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 12:22 pm
by erlinden
What is your definition of "the best"?

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 12:44 pm
by Lifz
BestVPN is one you make yourself, host CHR somewhere and use native Mikrotik protocols (EoIP, IPIP, etc.)
Generally avoid TCP based protocols (SSTP, OpenVPN) for performance reasons (single TCP connection), always prefer UDP ones (PPTP, L2TP,...).

Obviously it all depends on what you are trying to do.

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 12:47 pm
by xvo
BestVPN is one you make yourself, host CHR somewhere and use native Mikrotik protocols (EoIP, IPIP, etc.)
True.

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 4:37 pm
by IPANetEngineer
This often depends on what the clients will be...

Phones, Laptops, servers, firewalls??

You also need to consider the type of Internet connection the clients will be coming from - in some cases, TCP/443 behind NAT is all you are allowed to use.

UDP based VPNs are great if they meet the requirements listed above, if not, then select a VPN for connectivity first, then performance.

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 6:05 pm
by pe1chl
I think he is (like most new users) not looking for a VPN in the traditional meaning (to make a virtual network between two routers he is both managing), but the "new meaning" of "route all my internet traffic to some more-or-less trusted party who will route it to internet, instead of doing that directly via my ISP".
This really only makes sense when done from endpoint devices (like a PC or Phone), but for some reason people want to do that from their router too.

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 6:59 pm
by Steveocee
If they support L2TP and will happily give you a username, password and IPSEC key then they should be fine.

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 7:13 pm
by pe1chl
If they support L2TP and will happily give you a username, password and IPSEC key then they should be fine.
Yeah, but that is less and less popular for that kind of service. They move towards IKEv2, OpenVPN, Wireguard etc.

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 8:39 pm
by IPANetEngineer
Now that OpenVPN has UDP support in ROSv7, I expect we'll see a large migration to that once ROSv7 is prod and stable.

We've scaled OpenVPN to more than 100,000 clients with MikroTik for IoT solutions....it works really well

Re: Best VPN for Mikrotik Router

Posted: Tue Oct 08, 2019 9:08 pm
by Sob
I wouldn't celebrate yet, there's udp in v7, but it wasn't the only missing feature. So it's great step for own use, but not much changed for interoperability with someone else's service using standard OpenVPN.

Re: Best VPN for Mikrotik Router

Posted: Thu Oct 10, 2019 7:05 am
by jaytcsd
Since v7 and Spinrite 6.1 seem to be a long way off, what is a good secure Mikrotik to Mikrotik VPN that also lets road warriors in, or are we talking 2 different situations?

thanks

Re: Best VPN for Mikrotik Router

Posted: Thu Oct 10, 2019 11:30 am
by pe1chl
For roadwarrior clients I normally use L2TP/IPsec.
A single IPsec PSK is shared between all clients and each client has a username/password.

Of course when you want you can add the extra complexity of using certificates, and/or maybe IKEv2.

Re: Best VPN for Mikrotik Router

Posted: Thu Oct 10, 2019 4:10 pm
by IPANetEngineer
I wouldn't celebrate yet, there's udp in v7, but it wasn't the only missing feature. So it's great step for own use, but not much changed for interoperability with someone else's service using standard OpenVPN.
We've been able to interop with non-MikroTik OpenVPN linux builds. It takes a little work but is completely doable.

Re: Best VPN for Mikrotik Router

Posted: Thu Oct 10, 2019 4:25 pm
by pe1chl
The question is more: is it interoperable with existing OpenVPN server deployments as they are commonly made, without server-side changes.
Until then, there will be issues when connecting to servers that are outside your own control for management/configuration.
It would be best when MikroTik just used the existing OpenVPN code, as far as that is possible w.r.t. licensing.