I want to implement a vpn on my network. I want to connect mobile windows clients to my linux server over Internet.
I also want to learn more about vpns.

I've read that IPsec is the most complex, but if you know how to implement it is also the best.

Other say that it is to complex to be secure and correct implemented (Bruce Schneider). Despite all these, most hardware based firewalls (PIX from Cisco, hardware solutions from CheckPoint etc) implements IPsec (as far as I know).

TLS based VPS (OpenVPN) says it is at least as secure as IPsec but not so complicated and in some situations more sucure. As a plus it operates in the user space, follows the OS Ring Architecture rule etc.



So what do you think?

What should implement? About what should I study more? IPsec (openswan) or TLS/VPN (OpenVPN).


I want to hear your opinion based on your experience.

I'd say use OpenVPN unless you need to implement something very exotic... Just for the sake of mental sanity
OpenVPN will suffice in 95% of the cases and will be less of a hassle to get working.

This is, of course, just my own opinion!