Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Wireguard-docs: Setup, usage, configuration, and a full example

github.com

Post reply on HN
Print view View original

11–20 of 96 posts

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#11

Post by mingabunga »

jchook wrote: post #5

Gotta say, if you just want a VPN to work now, definitely check out Algo or Streisand. You can get a VPN running in an hour or less. Algo even supports wireguard. I currently have two VPNs — Algo Wireguard & iVPN. Anecdotally the wireguard VPN rocks— crazy fast in every way, including connection/disconnection. Sometimes YouTube is slow.. I just hop on WG and it’s fast again. I’ve achieved faster downloads via WG than…

We've been working on a Windows version for the past few years, same idea - instant connection/disconnection, crazy fast, modern encryption. Uses only 10% of a single server cpu at gigabit speed. Almost finished, just adding in encryption for TCP (UDP and DNS already done). Shameless self promotion: https://www.firetrust.com/products/hideaway-secure-unlimited...

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#12

Post by ubercow13 »

mingabunga wrote: post #11
jchook wrote: post #5

Gotta say, if you just want a VPN to work now, definitely check out Algo or Streisand. You can get a VPN running in an hour or less. Algo even supports wireguard. I currently have two VPNs — Algo Wireguard & iVPN. Anecdotally the wireguard VPN rocks— crazy fast in every way, including connection/disconnection. Sometimes YouTube is slow.. I just hop on WG and it’s fast again. I’ve achieved faster downloads via WG than…

We've been working on a Windows version for the past few years, same idea - instant connection/disconnection, crazy fast, modern encryption. Uses only 10% of a single server cpu at gigabit speed. Almost finished, just adding in encryption for TCP (UDP and DNS already done). Shameless self promotion: https://www.firetrust.com/products/hideaway-secure-unlimited...

Do you mean that your product is built on wireguard?

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#13

Post by mingabunga »

ubercow13 wrote: post #12
mingabunga wrote: post #11

Earlier quoted context omitted.

We've been working on a Windows version for the past few years, same idea - instant connection/disconnection, crazy fast, modern encryption. Uses only 10% of a single server cpu at gigabit speed. Almost finished, just adding in encryption for TCP (UDP and DNS already done). Shameless self promotion: https://www.firetrust.com/products/hideaway-secure-unlimited...

Do you mean that your product is built on wireguard?

No, it's not, it's our own implementation (except for the encryption part of course). We did a version similar to how Wireguard does it (UDP only) a few years back, but ran in to issues, so we ended up re-doing it with some different optimizations and UDP and TCP.

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#14

Post by genghizkhan »

I wish there was good documentation/a tutorial which shows one how to use systemd-networkd and nftables to manage wireguard interfaces. The Arch Wiki has some documentation[0], but I've never been able to get it past the initial handshake (which always succeeds) and no one on the IRC channel was able to help me out.

I don't want to ask for hand-holding, but some more comprehensive and accessible documentation might help me troubleshoot it better.

[0] https://wiki.archlinux.org/index.php/WireGuard#Using_systemd...

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#15

Post by stevekemp »

nsomaru wrote: post #7
jchook wrote: post #5

Gotta say, if you just want a VPN to work now, definitely check out Algo or Streisand. You can get a VPN running in an hour or less. Algo even supports wireguard. I currently have two VPNs — Algo Wireguard & iVPN. Anecdotally the wireguard VPN rocks— crazy fast in every way, including connection/disconnection. Sometimes YouTube is slow.. I just hop on WG and it’s fast again. I’ve achieved faster downloads via WG than…

My default-config Streisand server was compromised according to Vultr. Just a heads up because VPNs can’t really afford this.

Do you have further details? I mean this could be your server having SSH open and a weak root password, or it could be an exploit which hit Streisand, but we can't tell which ..

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#16

Post by davidcollantes »

sowbug wrote: post #4

Author, if you're reading this: thank you. This weekend I wrote a simple tool to manage a client/server-style Wireguard setup. It's a little less tedious than copying and pasting "wg genkey" and "wg pubkey" output as you're setting up new clients. It's not quite easy enough for someone to use without prior Wireguard setup knowledge, but if you've gotten your first client-server pair running, then you'll recognize whe…

Where is the tool you build?

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#17

Post by Nursie »

jchook wrote: post #5

Gotta say, if you just want a VPN to work now, definitely check out Algo or Streisand. You can get a VPN running in an hour or less. Algo even supports wireguard. I currently have two VPNs — Algo Wireguard & iVPN. Anecdotally the wireguard VPN rocks— crazy fast in every way, including connection/disconnection. Sometimes YouTube is slow.. I just hop on WG and it’s fast again. I’ve achieved faster downloads via WG than…

I managed to get StrongSwan IPSEC going in about an hour...

But then I'm looking for a configuration that allows me to route all my traffic via home from wherever I am, not a solution that allows me to route my home traffic via a third party.

Wireguard sounds interesting, and I'm going to learn more about it, but I like where I am with StrongSwan and just being able to issue a new certificate for a new device, and run with it.

Re: Wireguard-docs: Setup, usage, configuration, and a full example

#18

Post by NamTaf »

nsomaru wrote: post #7
jchook wrote: post #5

Gotta say, if you just want a VPN to work now, definitely check out Algo or Streisand. You can get a VPN running in an hour or less. Algo even supports wireguard. I currently have two VPNs — Algo Wireguard & iVPN. Anecdotally the wireguard VPN rocks— crazy fast in every way, including connection/disconnection. Sometimes YouTube is slow.. I just hop on WG and it’s fast again. I’ve achieved faster downloads via WG than…

My default-config Streisand server was compromised according to Vultr. Just a heads up because VPNs can’t really afford this.

Per the sibling comments, I'd definitely like to know more detail. I rely on Streisand when in China and so if it's something to do with Streisand itself then I want to be aware of that.
Post reply on HN