Earlier quoted context omitted.
People regularly manage thousands of servers using Puppet or Ansible and version control. The structured text configuration files all UNIX-like software utilize makes this trivial. The strengths of AD are more related to client software, where many of them uses the policy mechanisms therein for management. Maintaining servers isn't what it does best. This is a large part of the reason why "the cloud" is pretty much L…
I use ansible and salt to provision servers. It works great. It has limited to no use to manage users and their passwords or authorizations, their control over machines, remote access to a share and zillons other usages you need specialized software for. AD has it all natively.
WireGuard is in net-next
171–180 of 208 posts
Re: WireGuard is in net-next
#172Earlier quoted context omitted.
At the terminal with wg-quick, in NetworkManager, on a phone? Just wondering how impressive your kid is.
On my Macbook there's a drop-down menu hanging off a menu bar icon. I feel like I could definitely show a little kid how to get themselves on the VPN.
Re: WireGuard is in net-next
#173I'm excited by this, but I'd really love a userspace C or C++ implementation. I know that context switching syscalls take time, but I've enjoyed the trend of the last 10 years towards more userspace services, not less. (I'm particularly thinking of filesystems in userspace and block devices in userspace) Still, cool. cool, cool cool. I wonder how long until it's in debian.
> I wonder how long until it's in debian. I know you mean in stable, but it's been in unstable for 3+ years now!
Re: WireGuard is in net-next
#174Earlier quoted context omitted.
> WireGuard is much faster than OpenVPN Not relevant for most home internet connections > much simpler to set up than OpenVPN +1 > and it's much, much more secure than OpenVPN. That’s uselessly vague. Do you mean the protocol, the implementation approach, the underlying crypto, or what?
>> WireGuard is much faster than OpenVPN > Not relevant for most home internet connections Why it is not relevant?
Re: WireGuard is in net-next
#175Earlier quoted context omitted.
> Second: it's easy. To give you some perspective, it's so easy that my four year old knows how to turn it on when we're traveling and she wants to watch PBS Kids.
But can your 4 year old set up Wireguard on a Debian server? Psh, didn't think so. Amateur.
Re: WireGuard is in net-next
#176I've been using tinc[1] as a way to get a mesh VPN on all my machines that works even if some of them are behind restrictive firewalls. It works really well and I've automated the setup with puppet so I just deploy it automatically any time I bring up a machine. Highly recommended. Anyone know if there has been any recent work on making wireguard cover this use case? I'm not really worried about security as I treat t…
I use zerotier[1] in a similar fashion, and I don't think there's any out of box solution to get wireguard to do "smart" routing (have two hosts on same switch talk directly, still be able to talk to server in a remote datacenter and a client roaming on cellular - with multicast and mDNS/bonjour working seamlessly). It should be possible to set something up - but I believe you'd need some kind of managing daemon that…
Re: WireGuard is in net-next
#177What is the timeline for making wireguard viable for commerical VPNs? """ There's a few fundamental issues with wireguard that make it relatively unsuitable for commercial VPNs with many customers. For a start, if you want to offer customers multiple concurrent devices, each device needs it's own key, and all keys for all customers' devices need to be loaded into kernel memory and cross checked against every packet r…
Re: WireGuard is in net-next
#178Re: WireGuard is in net-next
#179This is very welcome news! I had a seamless time using wireguard (via a streisand installation) on my honeymoon in Italy on my phone and more importantly, my wife's phone. It worked seamlessly. Next up I'd like to see this be an easy config option in Unifi's network managment tools
Re: WireGuard is in net-next
#180Earlier quoted context omitted.
Her first desktop interface will be a command line, so after she learns to spell, give her a year. :P
my 4-year-old son learns English using sheLL :)
But either way, that seems like a good idea.