Live data from Hacker News

WireGuard 1.0 for Linux 5.6

lists.zx2c4.com

71–80 of 214 posts

Re: WireGuard 1.0 for Linux 5.6

#71

Now I really want to know when raspbian will get linux kernel 5.6. The most recent version of raspbian came out in February 2020 and uses linux kernel 4.19, which came out in late 2018. https://en.wikipedia.org/wiki/Linux_kernel_version_history

It might get 5.4 sometime, but it is probably sticking to the Longterm stable kernel release set like the rest of Debian Buster:

https://www.kernel.org/category/releases.html

Re: WireGuard 1.0 for Linux 5.6

#73
post #21

Earlier quoted context omitted.

If you're subject to state level actors attacking you, a VPS is probably the least of your worries. If you're just trying to make sure some kiddiot in a coffee shop isn't doing mass collections, a VPS is perfectly secure.

Linode has been compromised how many times now? I don't think considering a VPS insecure is really that far fetched.

That's kind of a tautology. If you assume the system is insecure, then yes its going to be insecure with that assumption. This is going to be true of any VPN system, so i think its an unfair criticism to level against this particular VPN setup.

If you want to be secure against local adversaries, use TOR.

Re: WireGuard 1.0 for Linux 5.6

#75

Now I really want to know when raspbian will get linux kernel 5.6. The most recent version of raspbian came out in February 2020 and uses linux kernel 4.19, which came out in late 2018. https://en.wikipedia.org/wiki/Linux_kernel_version_history

How does raspberry pi run on stock Ubuntu?

I am actually not sure. I know raspbian has modifications in it that take care of board specific issues in it, such as high power consumption/heat from some issue related to USB PD and/or power states. I am not too familiar with the inner workings of distros and how hardware-specific fixes are propagated, but I like the idea of sticking with officially supported OS/hardware combos for "set and forget" boxes.

Wireguard was too alluring to not try though, and now I really like it. I would like to move away from my homemade pull, build, and install scripts, but not for any good/justified reason. I suppose I just like the idea of someone being responsible for a software stack that I rely on.

Re: WireGuard 1.0 for Linux 5.6

#76
post #26

Earlier quoted context omitted.

I think the idea is that you're supposed to build a system to manage WireGuard using that sort of information. I.e. WireGuard provides the basic primitives and second- or third-party tooling uses them. I like that idea, because it means that the actual WireGuard core is small and it's usable right now. It is annoying that someone hasn't yet developed neat integrations for WireGuard and stuff I might want to use, but…

Yep, that's what I'm asking for... right now wireguard can only look at configuration text files AFAIK. If it had a way to invoke a command/script to lookup a key/ip, any number of external management systems could be created!

[deleted]

Re: WireGuard 1.0 for Linux 5.6

#77
post #74

I use WireGuard and it works perfectly fine as it is. Can someone explain why we need/want to put it into the Linux kernel?

If you've been using it on linux, you've almost certainly already been using the kernel version. Anecdotally, using it on my home LAN, the kernel implementation on linux performs much better than the userland implementation on MacOS. (Admittedly not the same hardware, the linux machine is a i5-3427U while the MacOS machine has an i5-5250U. I think the former might have an L2 cache advantage, but I'm not sure if that would explain the difference.)

Re: WireGuard 1.0 for Linux 5.6

#79
post #70
post #37

Earlier quoted context omitted.

Just be careful when setting up Algo VPN. Its secure defaults will probably block all other services you're running on your server and render them inaccessible. You might even end up not being able to ssh to your server if you choose not to let Algo set up ssh configurations (because you have your own). I would say install Algo on a dedicated droplet or backup your VPS before setting it up.

> I would say install Algo on a dedicated droplet or backup your VPS before setting it up. droplet == host?

VPS/VM offered by Digital Ocean
Post reply on HN