3 ms·
https://www.wireguard.com/ https://www.wireguard.com/ lists several of the features, and https://lwn.net/Articles/748582/ https://lwn.net/Articles/748582/ is an
by cyphar 8y ago
https://www.wireguard.com/ https://www.wireguard.com/ lists several of the features, and https://lwn.net/Articles/748582/ https://lwn.net/Articles/748582/ is an LWN article on WireGuard which lists some of the features.
One of the most obvious features is that you get roaming with WireGuard (like Mosh) which I don't think you can get from sshuttle (it might be technically possible to add, but I don't think it supported it last time I used it). It also allows for management of the VPN interface like a regular interface (so you can set iptables rules and other complicated network setups using it), rather than relying purely on proxying. And you don't need to give people SSH access in order to use it.
- e12e 8y agoOne major point over ssh is that: "WireGuard securely encapsulates IP packets over UDP." - so you avoid all the issues of tcp-over-tcp;wireguard is a "real" VPN.
- cyphar 8y agosshuttle doesn't pass TCP over TCP, it does some work on the "local" side before sending it over TCP so it's actually just "data-over-TCP"[1]. [1]: https://sshuttle.readthedocs.io/en/stable/how-it-works.html https://sshuttle.readthedocs.io/en/stable/how-it-works.html
- e12e 8y agoCool, I wasn't aware of that. Still ends up doing udp over tcp, though.
- beagle3 8y agoBut still doesn’t do udp or ip, only let’s you connect out (not in, which is often desirable but still a limitation). Also, you lose information about where connections originate - to the recipient, it all looks like it came from the sshuttle host.