Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linux under WSL2 can be leaking

mullvad.net

Post reply on HN
Print view View original

91–100 of 194 posts

Re: Linux under WSL2 can be leaking

#91

Post by mdoms »

kodablah wrote: post #27

I have noticed similar simply because the Cisco AnyConnect client doesn't work with WSL2 and is a known issue [0]. But that seemed to be blocking traffic instead of just allowing all traffic over non-VPN. However, openconnect does work fine as does the UWP-based AnyConnect client. I wonder how those latter two are successful tunneling traffic (or if it's only if they are started before the wsl2 vm is). 0 - https://gi…

> But that seemed to be blocking traffic instead of just allowing all traffic over non-VPN

Not what's happening here (despite the title).

Re: Linux under WSL2 can be leaking

#92

Post by filmgirlcw »

frenchyatwork wrote: post #76
Bedon292 wrote: post #49

Earlier quoted context omitted.

WSL is actually really good. To me, it gives you the best of both worlds. Linux for dev stuff, Windows for GUI and games. And its actual Linux, so I am dev'ing a little closer to prod than those on Macs. But that's less of a factor now everything is in Docker and we are all using the same containers. I also feel I have a superior Docker (runs on WSL2) experience to them, better interface and much better battery life.…

That's really over-selling it. WSL is okay. It's better than the previous monstrosities, but that's not saying much. You can't run VS Code in WSL, it literally has code to prevent you from doing that, even if you have a functioning X Server (which is a jolly pain to set up).

(Disclosure: I work at Microsoft but not on WSL2. I’m just a huge fan and I say that as a dedicated/devout Mac user)

Two things:

First, GUI support is coming [1] and the team is working to support both X11 and Wayland [2].

Second, the Remote Development Extension for VS Code [3] lets you do this seamlessly. It auto-configs to work with WSL or WSL2 and can also connect to a container or remote machine or GitHub Codespaces codespace. It’s awesome and all of your files, your terminal, everything is mapped to WSL2, with all the GUI parts from Windows. It’s one of my favorite things.

I’m not trying to convince people that WSL2 is the end-all be-all, even though I’m an unabashed fan, but I just want to correct the record a bit (regarding VS Code) and share that X11/Wayland GUI support is coming

[1]: https://devblogs.microsoft.com/commandline/whats-new-in-the-... [2]: https://youtu.be/b2mnbyRgXkY [3]: https://code.visualstudio.com/docs/remote/remote-overview

Re: Linux under WSL2 can be leaking

#93

Post by carlob »

johnisgood wrote: post #66
Barrin92 wrote: post #59

Earlier quoted context omitted.

>There's no way the banking and finance industry doesn't compete emissions wise with bitcoin not on a per transaction basis, which is the only relevant measure because the banking system supports a lot more people than bitcoin does. A single bitcoin transaction uses 610.20 kWh right now, which is comparable to the energy consumption of an average US household over 20 days.[1] Also for a comparison of scope, Tenpay, T…

I cannot wait for nuclear fusion to finally be here so people will stop worrying about the electricity consumption, and high consumption will not mean pollution or whatever.

Pretty sure the difficulty will go up accordingly then

Re: Linux under WSL2 can be leaking

#94

Post by sneak »

smarx007 wrote: post #31

The title is wrong. The VPN traffic does NOT leak. What leaks is the traffic that the VPN software tries to block when the VPN connection is not active. Mullvad uses Windows Firewall to block all internet access if VPN is not active (if the user configured so) and WSL2 bypasses this by not going through Windows Firewall. When the VPN is active, WSL2 traffic IS tunneled through the VPN. UPD: The solution may be to hav…

That’s exactly what leaking means. Traffic that is supposed to be vpn-or-nothing is going out in the clear.

Re: Linux under WSL2 can be leaking

#95

Post by [deleted] »

wing-_-nuts wrote: post #16

A bit off topic, but this sort of transparency is why I don't mind paying $6 / mo for a vpn when mullvad's competitors are much cheaper. Their wireguard support is great, and their speeds are much faster than what I got through openVpn on pia.

[deleted]

Re: Linux under WSL2 can be leaking

#96

Post by filmgirlcw »

shmerl wrote: post #63
garethrowlands wrote: post #55

Earlier quoted context omitted.

One reason to move off of Windows would be running graphical Linux apps. But that'll change soon.

If you are playing games on Linux, WSL doesn't help anything for sure, it only adds overhead.

But legit question, why would you want to play a game in Linux and not in Windows?

I’m not even being rhetorical, I’m genuinely curious if there are games with significantly better performance under Linux (and I’m assuming we would have to be talking about using an AMD card so I’m also curious if that performance under Linux is better than an Nvidia card under either OS), because maybe there are and I’m just totally unaware.

Re: Linux under WSL2 can be leaking

#97

Post by marcan_42 »

Jonnax wrote: post #39
shmerl wrote: post #11

Using WSL should be a very last resort anyway. Just use Linux straight on your hardware if you have a choice and ditch Windows.

Why? In my opinion Linux desktop environments are terrible compared to Windows. How's the display scaling these days? Is it still a better experience to run a 4k monitor at a lower resolution? What's the Nvidia driver situation? Still janky because their drivers are doing their own thing?

I just switched to a 4K monitor last week. Set display scaling to 1.5x in the KDE settings, logged in again, and everything looks great and scales cleanly. I haven't noticed any weird artifacts or bizarre UIs yet. It just works.

Except Spotify, that needs a command line flag to set the scale factor, but that app is well known to be half-assed on Linux (they also don't support input methods, so searching for Japanese songs is a copy and paste exercise) and that's not Linux's fault.

AIUI the nvidia drivers are a lot better these days, but most Linux users, myself included, know to stay away from nvidia unless you have very good reasons not to. AMD cards work beautifully.

Re: Linux under WSL2 can be leaking

#98

Post by drexlspivey »

Barrin92 wrote: post #59
monadic2 wrote: post #48

Earlier quoted context omitted.

Yea but a whole fraud department of humans emits a ton of carbon. There's no way the banking and finance industry doesn't compete emissions wise with bitcoin.

>There's no way the banking and finance industry doesn't compete emissions wise with bitcoin not on a per transaction basis, which is the only relevant measure because the banking system supports a lot more people than bitcoin does. A single bitcoin transaction uses 610.20 kWh right now, which is comparable to the energy consumption of an average US household over 20 days.[1] Also for a comparison of scope, Tenpay, T…

Luckily there is a mechanism for resource allocation and it is called price. I pay for 1 MWh, you pay for 1MWh and it doesn't matter what we use the energy for.

If you have an issue with how the energy is generated take it up with your local government.

Re: Linux under WSL2 can be leaking

#100

Post by jefftk »

logical_person wrote: post #81
wing-_-nuts wrote: post #16

A bit off topic, but this sort of transparency is why I don't mind paying $6 / mo for a vpn when mullvad's competitors are much cheaper. Their wireguard support is great, and their speeds are much faster than what I got through openVpn on pia.

very strange shilling considering mullvad doesn't know how the windows networking stack works and this bug exposes them as such. edit: to be clear, it's the responsibility of a VPN provider to fully understand the platform they're selling a VPN solution for. the fact that a virtual machines on windows do not use the host's NDIS stack/firewall is well-known.

Speaking positively of a company is not in itself shilling.
Post reply on HN