Live data from Hacker News

WireGuard is now in Linus' tree

lists.zx2c4.com

81–90 of 293 posts

Re: WireGuard is now in Linus' tree

#81

Earlier quoted context omitted.

I've been using WireGuard on my Android phone for a good while now using a free digital ocean droplet via https://github.com/trailofbits/algo It's fast. It's easy. You never have to think about it. It just works.

> using a free digital ocean droplet I can't seem to find any "free" option on their pricing page. Could you elucidate?

An engineering approximation to free?

Re: WireGuard is now in Linus' tree

#82
post #68
post #28

Earlier quoted context omitted.

I think it's pretty common in the US with the various providers. You get a public IP. I didn't do anything special for that.

Yeah, I don't think I've ever encountered an ISP in the US that didn't give you a public IP. Maybe they exist? You only get one, so you typically NAT everything, port 25 is blocked and often port 80 is as well, but that's about it.

NAT and double-NAT are common in WISP networks. Also of course most hotels, Starbucks, schools, conferences, airplanes, albeit those are not ISP services. And cellular carriers often NAT.

Re: WireGuard is now in Linus' tree

#83

As someone who regularly deals with IPSec in conservative network environments, Wireguard can’t gain broad adoption soon enough, in my opinion. Now that it’s merged into Linus’s tree, any word on it getting an official release and the “this isn’t production ready, so no CVEs” disclaimer going away? EDIT: Further back in the thread, Donenfeld says “Please note that until Linux 5.6 is released, this snapshot is a snaps…

If you value WireGuard and can spare a few bucks the inventor/maintainer is getting about 1/10th what they publicly ask for to maintain:

https://www.patreon.com/zx2c4

Re: WireGuard is now in Linus' tree

#84
post #79

Earlier quoted context omitted.

Dynamic in theory, but for many people the IP is unchanged for a long time. I remember reading an article that said the average length of time between dynamic IP changes tracked by some company was something like seven months, though I can't find it now. I have cable with a theoretically dynamic DNS but it's changed once in >4 years.

Can you be sure that during 4yrs it never changed >1 even for a short time, maybe hours or days, then reverted back

That's not really a thing. The pools are large-ish; the chances of winding back on the same IP after a change are tiny.

Re: WireGuard is now in Linus' tree

#85
post #49

I’m using WireGuard daily on Linux and iPhone. It’s hard to describe how much better of an experience this is than OpenVPN. Connections are reliable and durable, latency is pretty low, and you can actually understand the software.

I setup WireGuard on my Ubiquiti router and have profiles installed on my phone and Mac.

Extremely convenient for some basic privacy when on a public hotspot.

Re: WireGuard is now in Linus' tree

#86
Very glad to see WireGuard getting more adoption. I've been using it while mobile and traveling and it's been absolutely rock solid.

OpenWrt router back at home, multiple Android devices and Fedora machines connecting back that just work seamlessly between different networks. It's been such a treat to use and watch and help it mature.

Just need more popular VPN providers to start supporting it -- NordVPN and PIA have provided "support" for it, and Nord allows using it as "NordLynx" on their Linux app.

Re: WireGuard is now in Linus' tree

#88
WireGuard is cool and we really like it at our company (a bunch of infosec consultants). The management of it for an even small number (20) of users is a no-go. OpenVPN is ultra reliable and provides legit 2FA options when set up well. I look forward to legit management tools and improvements. For personal use it has been great. Much simpler than OpenVPN for a few (3) users.

Re: WireGuard is now in Linus' tree

#89

WireGuard is cool and we really like it at our company (a bunch of infosec consultants). The management of it for an even small number (20) of users is a no-go. OpenVPN is ultra reliable and provides legit 2FA options when set up well. I look forward to legit management tools and improvements. For personal use it has been great. Much simpler than OpenVPN for a few (3) users.

I got the feeling that it's presently aimed more as a replacement for IPSEC site-to-site VPN, which is annoying as hell to configure considering the number of implementations and likelihood that one messed up setting will cause an inscrutable problem. Cipher suite incompatibility, subnet export and routing issues, and there's always the delightful fact that it never seems completely clear that you've got a tunnel up and running. I welcome a clear alternative.
Post reply on HN