Getting Started with WireGuard

Post by mqus » Wed, Apr 08, 2020, 11:51 AM UTC

franga2000 wrote: post #60

mqus wrote: post #54

Earlier quoted context omitted.

In my experience, this does work somewhat, but doesn't set up the routes properly[1] and doesn't provide an interface to the networkmanager applet, so you are still left with configuring the profiles in the terminal. There is much left to be desired. Sadly the third-party plugin isn't much better and seems to be discontinued[2]. [1] https://forum.manjaro.org/t/wireguard-with-networkmanager-1-... [2] https://github.co…

I seem to recall configuring it entirely (sans key generation) in KDE Plasma network settings. I'm guessing you're referring to another applet?

Post by crazy_hombre » Wed, Apr 08, 2020, 12:33 PM UTC

mindslight wrote: post #49

e12e wrote: post #13

Hm. I guess no-one has bothered with nftables yet, even when dealing with network code that's becoming part of the new upstream kernel (not just this blog, AFAIK wireguard upstream doesn't have any examples on using nftables either, just iptables). I guess we need a new networking how-to? Anyone aware of some resources I might have missed? OK, I guess the nftables wiki is the "how-to": https://wiki.nftables.org/wiki-…

IMO nftables is best used with your full ruleset defined in a file, and atomically loaded. nftables certainly does make your ruleset more grokkable than statefully appending ad-hoc rules everywhere, but you necessarily need the whole picture to gain from it. So unfortunately it makes less sense for one-liners. Case in point: to use the masquerade action in a postrouting/nat chain, you also have to register a (possibl…

Post by borplk » Wed, Apr 08, 2020, 2:21 PM UTC

franga2000 wrote: post #58

borplk wrote: post #56

Does anyone have a guide for setting up server-to-server wireshark connection? Everything I have found so far is about consumer VPN stuff. I'm interested in possibly using wireshark for server-to-server as a less painful alternative to TLS.

Assuming you meant Wireguard both times, I have a small guide I wrote for my team that I can throw up on my site. If I don't post a link here in a couple hours, reply here so I get a notification.

Post by pkulak » Wed, Apr 08, 2020, 3:37 PM UTC

sandov wrote: post #11

pkulak wrote: post #9

Just FYI, WireGuard is baked right into the Linux 6.x kernel. Unless you're on a rolling distro you won't see it yet, but very cool indeed.

5.6

Post by WGH_ » Wed, Apr 08, 2020, 8:52 PM UTC

dharmab wrote: post #37

e12e wrote: post #13

Hm. I guess no-one has bothered with nftables yet, even when dealing with network code that's becoming part of the new upstream kernel (not just this blog, AFAIK wireguard upstream doesn't have any examples on using nftables either, just iptables). I guess we need a new networking how-to? Anyone aware of some resources I might have missed? OK, I guess the nftables wiki is the "how-to": https://wiki.nftables.org/wiki-…

The community kind of skipped right over nftables to BPF. Simple use cases use iptables, complicated ones use BPF, nftables isn't flexible enough for the complicated use cases so everyone keeps using iptables.