Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Wiretap – Transparent WireGuard proxy server without root

github.com

Post reply on HN
Print view View original

11–19 of 19 posts

Re: Show HN: Wiretap – Transparent WireGuard proxy server without root

#11

Post by fulafel »

stevefan1999 wrote: post #9
random021 wrote: post #7

I’m not sure to understand what makes it different from WireGuard. Could someone eli5 ?

Userspace capability. Especially when running inside containers.

Kernel networking interfaces already work pretty well in containers (using network namespaces). You can eg run openvpn or some fancier SDN inside a container to tunnel its traffic with the default non-privileged permission set that

If you are running an old kernel from before Wireguard was merged to the mainline kernel, or want the extra safery from a memory safe language wireguard implementation this can be useful.

Re: Show HN: Wiretap – Transparent WireGuard proxy server without root

#12

Post by no_time »

learndeeply wrote: post #4

Hilarious name for an open source project released by a government lab.

Reminds me of Moloch, the packet capture and indexing software[0]. I wonder why it was renamed and moved out of the AOL github org...

[0]: https://news.ycombinator.com/item?id=22949604

Re: Show HN: Wiretap – Transparent WireGuard proxy server without root

#15

Post by omgtehlion »

jordemort wrote: post #5

Wireproxy can do similar stuff: https://github.com/octeep/wireproxy (Disclaimer: I am a contributor to Wireproxy)

Thanks for the link! IIUIC, wireproxy is not similar, but complementary: you can run wiretap on the server-side and wireproxy on the client and have a complete user-space solution.
Post reply on HN