Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Wag, MFA and Enrollment for WireGuard

github.com

Post reply on HN
Print view View original

11–20 of 68 posts

Re: Show HN: Wag, MFA and Enrollment for WireGuard

#15

Post by zeotroph »

aragilar wrote: post #4

[flagged]

"Numerous others" which also support MFA, have some (Web)-UI and are also open source? I only know of DefGuard[1], which aspires to do a lot more.

1: https://github.com/DefGuard/defguard discussed at https://news.ycombinator.com/item?id=36056080

Re: Show HN: Wag, MFA and Enrollment for WireGuard

#16

Post by gremlinunderway »

qweqwe14 wrote: post #13
linsomniac wrote: post #12

Earlier quoted context omitted.

You sound like a fun guy to have at parties. :-)

[flagged]

I play a video game that I'm sure someone has speedrun way faster than me, and got way more points and did it with way more efficiently than me.

I still play video games.

Making a Tailscale replacement doesnt sound fun for me, but for some I guess it is? Why shit on that? Who cares?

Re: Show HN: Wag, MFA and Enrollment for WireGuard

#17

Post by mynameisvlad »

qweqwe14 wrote: post #13
linsomniac wrote: post #12

Earlier quoted context omitted.

You sound like a fun guy to have at parties. :-)

[flagged]

That was quite clearly expressed in the OP:

> Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd!

Just because you don’t see or don’t care to see the point doesn’t mean that it doesn’t exist. And just because it’s not fun to you does not mean it’s not fun to anyone.

As everyone else has said, people can choose to have fun with their free time and what they do with it is up to them. “This isn’t a viable competitor” is an extremely shallow dismissal of one’s work when the motivating factor isn’t even remotely making a competitor. Which some people couldn’t give two shits about.

Re: Show HN: Wag, MFA and Enrollment for WireGuard

#18

Post by lmeyerov »

aragilar wrote: post #4

[flagged]

TailScale made key parts of their stack proprietary, route key bits centrally, and I'm sure other issues. And, just like with browsers, alts are good. I'd expect a lot of whitespace for a more open, secure, and usable impl.

Most people do not use TailScale. I'd encourage doing the work of understanding why, there is likely a big opportunity somewhere here.

Re: Show HN: Wag, MFA and Enrollment for WireGuard

#19

Post by Aloha »

asimops wrote: post #9

Have you tackled the issue of session management or are you planning to do so? Essentially wireguard key are just eternal session keys. I would expect software that implements the wireguard transport layer to implement session management to be called a working VPN server solution. This means a second channel to the server for periodically rotating session keys, terminating sessions, changing IP addresses, configuring…

It seems to me that if I were building a VPN client like Global Protect but using WG, I'd have an eternal per client auth key that is used to set up an initial tunnel to the VPN controller, over that you perform auth, etc, then you're given another session key, which is valid as long as that session is. The first tunnel would disconnect as soon as you finished authenticating and got your actual session key.
Post reply on HN