5 ms·

It's WireGuard [1] coupled with tech from our Mobile SDK [2] and (in the case of Warp+) Argo [3] 1- https://github.com/cloudflare/boringtun https://github.com/

It's WireGuard [1] coupled with tech from our Mobile SDK [2] and (in the case of Warp+) Argo [3] 1- https://github.com/cloudflare/boringtun https://github.com/cloudflare/boringtun 2- https://blog.cloudflare.com/mobile-sdk-acceleration/ https://blog.cloudflare.com/mobile-sdk-acceleration/ 3- https://www.cloudflare.com/products/argo-smart-routing/ https://www.cloudflare.com/products/argo-smart-routing/

acdha 8y ago
Are you also bosdev? I noticed an identical comment posted under that account before this one.
- zackbloom 8y ago
  I was, at one point in my life, a Boston Developer ;). Sadly at least one of those things is no longer accurate. Switched the account so it wouldn't be confusing who was commenting.
  - acdha 8y ago
    That makes sense — I had seen it on my phone under that name and was then surprised when I pulled the link up to share it, although since I'm at 160,606 on the wait-list that hurry was probably unnecessary ;-)
vbezhenar 8y ago
Is there significant differences from stock wireguard? Can I benefit from your work on my own server? Also I wonder how do you work with censors? For example Russia censors internet and requires that all VPN services cooperate and censor internet for Russian customers as well (probably they will ban services that won't comply). Will you cooperate or will you accept that Russian users won't be able to reach your service? I guess, that some other countries use or will use similar techniques. For example I'm from Kazakhstan, there are many banned websites and they seem to ban popular VPN and proxy services as well (I'm using my own server with OpenVPN, but obviously I'm just a small fish to bother).
- tracker1 8y ago
  The benefits to Cloudflare is they will have more entry/exit nodes on their network(s). While running your own will go through your own server in/out and even then when travelling may only add more latency. Many on here are and have been doing just that all the same.
hsivonen 8y ago
Can the service be used with another Wireguard client (hopefully bundled into Linux distros in the future) without installing Cloudflare’s client software?
- jgrahamc 8y ago
  We do not currently plan to allow third-party WireGuard clients to connect to the service.
  - sascha_sl 8y ago
    It it just me or does it sound wrong to call wireguard, the kernel module, third party software in this context? That's literally the reference implementation.
    - arghwhat 8y ago
      It is wrong. Warp is the third-party implementation. It would be amazing if it could be made to work from standard wireguard, but I suppose there's a chance that if desktop versions arrive, you'll be able to extract the keys. The only thing stopping that would be if Cloudflare broke the protocol.
      - jgrahamc 8y ago
        We can argue about the terminology but from the perspective of the company other WireGuard clients (including the official ones) are 'third-party' in the sense that we don't control them. That makes supporting users of those clients more expensive for us (e.g. we currently have a mobile app for Warp, someone calls our support asking for help with a Linux client...)
        nickysielicki 8y ago
        Not supporting a configuration is much different than actively prohibiting it. It's okay to just say, "Hey, we are running a free VPN. We're making some privacy guarantees and are trying to log as little as possible. That exposes us to being abused, which means that we have to put some limits in-place on the client." There's nothing unreasonable about that at all.

acdha 8y ago

Are you also bosdev? I noticed an identical comment posted under that account before this one.

zackbloom 8y ago
I was, at one point in my life, a Boston Developer ;). Sadly at least one of those things is no longer accurate. Switched the account so it wouldn't be confusing who was commenting.
- acdha 8y ago
  That makes sense — I had seen it on my phone under that name and was then surprised when I pulled the link up to share it, although since I'm at 160,606 on the wait-list that hurry was probably unnecessary ;-)

vbezhenar 8y ago

Is there significant differences from stock wireguard? Can I benefit from your work on my own server? Also I wonder how do you work with censors? For example Russia censors internet and requires that all VPN services cooperate and censor internet for Russian customers as well (probably they will ban services that won't comply). Will you cooperate or will you accept that Russian users won't be able to reach your service? I guess, that some other countries use or will use similar techniques. For example I'm from Kazakhstan, there are many banned websites and they seem to ban popular VPN and proxy services as well (I'm using my own server with OpenVPN, but obviously I'm just a small fish to bother).

tracker1 8y ago
The benefits to Cloudflare is they will have more entry/exit nodes on their network(s). While running your own will go through your own server in/out and even then when travelling may only add more latency. Many on here are and have been doing just that all the same.

hsivonen 8y ago

Can the service be used with another Wireguard client (hopefully bundled into Linux distros in the future) without installing Cloudflare’s client software?

jgrahamc 8y ago
We do not currently plan to allow third-party WireGuard clients to connect to the service.
- sascha_sl 8y ago
  It it just me or does it sound wrong to call wireguard, the kernel module, third party software in this context? That's literally the reference implementation.
  - arghwhat 8y ago
    It is wrong. Warp is the third-party implementation. It would be amazing if it could be made to work from standard wireguard, but I suppose there's a chance that if desktop versions arrive, you'll be able to extract the keys. The only thing stopping that would be if Cloudflare broke the protocol.
    - jgrahamc 8y ago
      We can argue about the terminology but from the perspective of the company other WireGuard clients (including the official ones) are 'third-party' in the sense that we don't control them. That makes supporting users of those clients more expensive for us (e.g. we currently have a mobile app for Warp, someone calls our support asking for help with a Linux client...)
      - nickysielicki 8y ago
        Not supporting a configuration is much different than actively prohibiting it. It's okay to just say, "Hey, we are running a free VPN. We're making some privacy guarantees and are trying to log as little as possible. That exposes us to being abused, which means that we have to put some limits in-place on the client." There's nothing unreasonable about that at all.