Live data from Hacker News

Wg-access-server: WireGuard VPN server and web UI for device management

github.com

11–20 of 35 posts

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#11
post #6

Earlier quoted context omitted.

Also of note is that this is a fork of wg-access-server from the looks of it.

Yes, it's a fork as the original project is dead for a year already.

We used the Upstream project for a while, but we were missing some features like IPv6, so we started this fork and added them ourselves, hoping it would be useful for a few others as well.

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#12
post #5

This would be great if it automatically generated ` . .search.domain.vpn` DNS names for all of the devices.

This is a thing in Netmaker, another WireGuard server that is being built by a YC startup: https://github.com/gravitl/netmaker

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#15
What is the recommend wireguard mesh solution where peers can easily join and leave and shortest connection paths are automatically determined?

I want to setup a way to access my mobile home office subnet (behind cellular which doesn't allow incoming) and two other subnets sites and some mobile devices which come and go.

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#16
post #15

What is the recommend wireguard mesh solution where peers can easily join and leave and shortest connection paths are automatically determined? I want to setup a way to access my mobile home office subnet (behind cellular which doesn't allow incoming) and two other subnets sites and some mobile devices which come and go.

I don’t think wireguard will do that shortest path routing for you. Look into babel routing protocol and friends.

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#17
post #15

What is the recommend wireguard mesh solution where peers can easily join and leave and shortest connection paths are automatically determined? I want to setup a way to access my mobile home office subnet (behind cellular which doesn't allow incoming) and two other subnets sites and some mobile devices which come and go.

WireGuard on its own doesn't do that. WireGuard only sets up tunnels between peers. If you want something like you describe, you need another product that integrates WireGuard.

It's a bit boring but in a situation like yours the most straightforward way would be to set up WireGuard gateways at each of your sites and have them talk to each other and the mobile devices.

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#18
post #15

What is the recommend wireguard mesh solution where peers can easily join and leave and shortest connection paths are automatically determined? I want to setup a way to access my mobile home office subnet (behind cellular which doesn't allow incoming) and two other subnets sites and some mobile devices which come and go.

Tailscale works perfectly for this.

There's a third party open source server, too: https://github.com/juanfont/headscale

(I just use the free hosted backend, obviously you trust them to do the key exchange)

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#19
Well this is not the kind of thing I want to see in a tool I'm using to secure my networks:

> This is a fork of the original work of place1. Since the upstream is currently poorly maintained, we try to add new features and keep the project up to date and in a working state.

Re: Wg-access-server: WireGuard VPN server and web UI for device management

#20
post #15

What is the recommend wireguard mesh solution where peers can easily join and leave and shortest connection paths are automatically determined? I want to setup a way to access my mobile home office subnet (behind cellular which doesn't allow incoming) and two other subnets sites and some mobile devices which come and go.

Have you taken a look at Nebula [0]? Might fit your needs. It also uses the Noise Protocol Framework but adds the bells and whistles on top needed to synthesize an overlay network like you want. MIT licensed too fwiw, full self hosting. Worth a look at any rate, WireGuard is much lower level though I'm sure it could be built upon for the same purpose.

----

0: https://github.com/slackhq/nebula

Post reply on HN