One thing I wish for wireguard: the ability to look up keys/ips in an external system like LDAP. I moved an entire call center [50+ people] fully remote last week. We're using wireguard. Key management stinks, and that is my only complaint! It is an incredible piece of software and I'm very thankful for it.
Why not OpenVPN?
WireGuard 1.0 for Linux 5.6
151–160 of 214 posts
Re: WireGuard 1.0 for Linux 5.6
#152Earlier quoted context omitted.
YMMV, but I was able to get https://archlinuxarm.org/ running on my pis without too much head-scratching. arch is on 5.5.6 as of 3/1/2020 ( https://www.archlinux.org/download/ ), and it seems like the ARM porters are pretty good about keeping their project in sync (two day delay): http://de3.mirror.archlinuxarm.org/os/rpi/ . My best guess is that by April or May, Arch will do the minor version bump, and then a couple…
Arch is on 5.5.13 and has already been marked out of date: https://www.archlinux.org/packages/core/x86_64/linux/ I would guess that we'll get 5.6 in the coming days.
Is the main download page the rough equivalent to `master`, and your link is like the feature branch for merging the latest kernel version into the distro?
Re: WireGuard 1.0 for Linux 5.6
#153Earlier quoted context omitted.
Arch is on 5.5.13 and has already been marked out of date: https://www.archlinux.org/packages/core/x86_64/linux/ I would guess that we'll get 5.6 in the coming days.
Interesting, can you cure my ignorance on why they don't claim to include 5.5.13 kernel in the main download page? I'm not super familiar with how distros are packaged up for consumers Is the main download page the rough equivalent to `master`, and your link is like the feature branch for merging the latest kernel version into the distro?
Re: WireGuard 1.0 for Linux 5.6
#154Earlier quoted context omitted.
Interesting, can you cure my ignorance on why they don't claim to include 5.5.13 kernel in the main download page? I'm not super familiar with how distros are packaged up for consumers Is the main download page the rough equivalent to `master`, and your link is like the feature branch for merging the latest kernel version into the distro?
The download page is for the monthly generated install isos, during the install process it will sync with repos and install the latest version
That makes perfect sense, actually: no sense crippling install the .iso with (potentially) unstable program versions, to stymie the install process.
Re: WireGuard 1.0 for Linux 5.6
#155Earlier quoted context omitted.
I'm looking forward to the days when we have good user management for Wireguard. It's so hard to scale it across just my family right now.
Algo (mentioned above) will generate a bunch of profiles for you (including QR codes to configure mobile devices without needing to type awkward strings), which works pretty well for me - at least with a family you won't need to add or revoke identities very often I'd hope...
Re: WireGuard 1.0 for Linux 5.6
#156Earlier quoted context omitted.
Algo vpn is the best way to set up wireguard.
I wish people would stop automatically recommending Algo, for instance it doesn't support Arch. It's the best if your platform is supported. Otherwise, it's easier to just manually set up everything.
Re: WireGuard 1.0 for Linux 5.6
#157Earlier quoted context omitted.
If you're subject to state level actors attacking you, a VPS is probably the least of your worries. If you're just trying to make sure some kiddiot in a coffee shop isn't doing mass collections, a VPS is perfectly secure.
Linode has been compromised how many times now? I don't think considering a VPS insecure is really that far fetched.
Re: WireGuard 1.0 for Linux 5.6
#158One thing I wish for wireguard: the ability to look up keys/ips in an external system like LDAP. I moved an entire call center [50+ people] fully remote last week. We're using wireguard. Key management stinks, and that is my only complaint! It is an incredible piece of software and I'm very thankful for it.
Re: WireGuard 1.0 for Linux 5.6
#159Re: WireGuard 1.0 for Linux 5.6
#160One thing I wish for wireguard: the ability to look up keys/ips in an external system like LDAP. I moved an entire call center [50+ people] fully remote last week. We're using wireguard. Key management stinks, and that is my only complaint! It is an incredible piece of software and I'm very thankful for it.
(Tailscale co-founder here.) Building on what katnegermis said, this is what we're trying to help with. We integrate with identity management systems and handle the key management (and NAT traversal) on top of WireGuard, making it easier to deploy and manage. If you're interested, a colleague of mine wrote up a blog post on how things work: https://tailscale.com/blog/how-tailscale-works/
> Log in with your Gmail account
HHNNNNNNGNNGNGNGNGNGNNGNNN ....
> look around a bit more
> no mention of license
is this proprietary software? lol no thanks, keep it.