Live data from Hacker News

WireGuard 1.0 for Linux 5.6

lists.zx2c4.com

151–160 of 214 posts

Re: WireGuard 1.0 for Linux 5.6

#151

One thing I wish for wireguard: the ability to look up keys/ips in an external system like LDAP. I moved an entire call center [50+ people] fully remote last week. We're using wireguard. Key management stinks, and that is my only complaint! It is an incredible piece of software and I'm very thankful for it.

Why not OpenVPN?

Because ovpn is not as efficient as wireguard.

Re: WireGuard 1.0 for Linux 5.6

#152
post #117

Earlier quoted context omitted.

YMMV, but I was able to get https://archlinuxarm.org/ running on my pis without too much head-scratching. arch is on 5.5.6 as of 3/1/2020 ( https://www.archlinux.org/download/ ), and it seems like the ARM porters are pretty good about keeping their project in sync (two day delay): http://de3.mirror.archlinuxarm.org/os/rpi/ . My best guess is that by April or May, Arch will do the minor version bump, and then a couple…

Arch is on 5.5.13 and has already been marked out of date: https://www.archlinux.org/packages/core/x86_64/linux/ I would guess that we'll get 5.6 in the coming days.

Interesting, can you cure my ignorance on why they don't claim to include 5.5.13 kernel in the main download page? I'm not super familiar with how distros are packaged up for consumers

Is the main download page the rough equivalent to `master`, and your link is like the feature branch for merging the latest kernel version into the distro?

Re: WireGuard 1.0 for Linux 5.6

#153
post #152

Earlier quoted context omitted.

Arch is on 5.5.13 and has already been marked out of date: https://www.archlinux.org/packages/core/x86_64/linux/ I would guess that we'll get 5.6 in the coming days.

Interesting, can you cure my ignorance on why they don't claim to include 5.5.13 kernel in the main download page? I'm not super familiar with how distros are packaged up for consumers Is the main download page the rough equivalent to `master`, and your link is like the feature branch for merging the latest kernel version into the distro?

The download page is for the monthly generated install isos, during the install process it will sync with repos and install the latest version

Re: WireGuard 1.0 for Linux 5.6

#154
post #153
post #152

Earlier quoted context omitted.

Interesting, can you cure my ignorance on why they don't claim to include 5.5.13 kernel in the main download page? I'm not super familiar with how distros are packaged up for consumers Is the main download page the rough equivalent to `master`, and your link is like the feature branch for merging the latest kernel version into the distro?

The download page is for the monthly generated install isos, during the install process it will sync with repos and install the latest version

Thank you!

That makes perfect sense, actually: no sense crippling install the .iso with (potentially) unstable program versions, to stymie the install process.

Re: WireGuard 1.0 for Linux 5.6

#155

Earlier quoted context omitted.

I'm looking forward to the days when we have good user management for Wireguard. It's so hard to scale it across just my family right now.

Algo (mentioned above) will generate a bunch of profiles for you (including QR codes to configure mobile devices without needing to type awkward strings), which works pretty well for me - at least with a family you won't need to add or revoke identities very often I'd hope...

My family shuns a member every other week. If you can't access the family VPN anymore, that is your notice.

Re: WireGuard 1.0 for Linux 5.6

#156
post #122

Earlier quoted context omitted.

Algo vpn is the best way to set up wireguard.

I wish people would stop automatically recommending Algo, for instance it doesn't support Arch. It's the best if your platform is supported. Otherwise, it's easier to just manually set up everything.

So they shouldn't recommend a project that works for a bunch of popular platforms out of the box because it doesn't support one niche OS?

Re: WireGuard 1.0 for Linux 5.6

#157
post #21

Earlier quoted context omitted.

If you're subject to state level actors attacking you, a VPS is probably the least of your worries. If you're just trying to make sure some kiddiot in a coffee shop isn't doing mass collections, a VPS is perfectly secure.

Linode has been compromised how many times now? I don't think considering a VPS insecure is really that far fetched.

The kid in the coffeeshop is probably not the one hacking Linode to compromise your VPN running on your VPS.

Re: WireGuard 1.0 for Linux 5.6

#158

One thing I wish for wireguard: the ability to look up keys/ips in an external system like LDAP. I moved an entire call center [50+ people] fully remote last week. We're using wireguard. Key management stinks, and that is my only complaint! It is an incredible piece of software and I'm very thankful for it.

How are you doing the user management piece? Are all users treated in the same manner or do you have different groups with different ACLs etc?

Re: WireGuard 1.0 for Linux 5.6

#159
Any ideas how to get a client-server style VPN setup with WireGuard working with IPv6 so that it keeps working even if the public IP address of your VPN server changes? The configurations I've seen assign a statically configured IP address to a client. This works fine with NATted IPv4, but with IPv6, addresses are "public", so the client must basically know the prefix of the server to be able to configure a sane address, and if that changes, the configuration must be changed by hand.

Re: WireGuard 1.0 for Linux 5.6

#160

One thing I wish for wireguard: the ability to look up keys/ips in an external system like LDAP. I moved an entire call center [50+ people] fully remote last week. We're using wireguard. Key management stinks, and that is my only complaint! It is an incredible piece of software and I'm very thankful for it.

(Tailscale co-founder here.) Building on what katnegermis said, this is what we're trying to help with. We integrate with identity management systems and handle the key management (and NAT traversal) on top of WireGuard, making it easier to deploy and manage. If you're interested, a colleague of mine wrote up a blog post on how things work: https://tailscale.com/blog/how-tailscale-works/

> Solo plan

> Log in with your Gmail account

HHNNNNNNGNNGNGNGNGNGNNGNNN ....

> look around a bit more

> no mention of license

is this proprietary software? lol no thanks, keep it.

Post reply on HN