3 ms·
I actually gave up after trying for a while. They mention an "easy" way to do traditional VPN usage, but it never worked, and various blogs have differing opini
by louiskottmann 8y ago
I actually gave up after trying for a while. They mention an "easy" way to do traditional VPN usage, but it never worked, and various blogs have differing opinions on how to properly do that.
I wish there was better hands-on documentation for WG, but I guess it really is an addition to iptables and thus restricted to people versed in that area. Which I am not.
I do intend to try again though.
- StavrosK 8y agoHere you go, plug and play: https://www.pastery.net/gvfyub+hacbne/#gvfyub https://www.pastery.net/gvfyub+hacbne/#gvfyub Use with `wg-quick up <configfile.conf>` and you're done. I don't know why this isn't in the documentation, it strikes me as what 99% of users want, and the other 1% knows how to do whatever they need.
- zx2c4 8y agoAdding the masquerade rules and forward rules as an example in the wg-quick(8) man page sounds like a good idea. Want to send a patch to the mailing list?
- StavrosK 8y agoErr, sure, I'll have to figure out how to do that first, though. I'm assuming I can't make a pull request somewhere?
- zx2c4 8y agoIt's even easier than that: $ git commit -s -m "man: add example for bla bla bla" $ git send-email --to=wireguard@lists.zx2c4.com HEAD~ And that's it! This is also, by the way, how submissions to the kernel itself work, so if you're ever interested in doing that and want to get used to the process in a smaller environment, this could be a place to learn.
- StavrosK 8y agoOh huh, cool, I'll get to that shortly, thanks!
- louiskottmann 8y agoThank you, I will try that
- lighttower 8y agocan wireguard be run from different namespaces so that only certain applications are tunneled through the wg0 interface?