Looking to replace our aging OpenVPN setup for ~30 users. Primary concerns are security posture and connection speed for financial data.
Key requirements:
* Clientless browser access for contractors.
* Device posture checks before granting access.
* Minimal latency for database queries over the tunnel.
OpenVPN is a known quantity, but management overhead is high. Twingate's zero-trust model seems simpler to enforce.
Has anyone made this specific switch in a regulated environment? Need concrete details on:
* Real-world throughput compared to a tuned OpenVPN config.
* Logging integration for audit trails.
* The actual learning curve for a small team.
Our current OpenVPN server config (Ubuntu) for reference:
```hcl
# ... typical config omitted ...
client-to-client
duplicate-cn
push "route 10.10.0.0 255.255.0.0"
```
—cp
—cp