5 ms·
I consider myself fairly competent, and I couldn’t understand the wireguard documentation enough to setup my own install without resorting to algo [0]. There’s
by Shank 8y ago
I consider myself fairly competent, and I couldn’t understand the wireguard documentation enough to setup my own install without resorting to algo [0]. There’s real value in wrapping a system like WireGuard into a product, because it democratizes technology rather than making it available only to those knowledgable enough to understand how to set it up. I think Warp is great in that regard.
[0]: https://github.com/trailofbits/algo https://github.com/trailofbits/algo
- TimTheTinker 8y ago> I couldn’t understand the wireguard documentation enough to setup my own install without resorting to algo Not sure what you mean. Algo has no relationship to WireGuard; it's basically a customized StrongSwan setup under the hood, which utilizes IKEv2 (not WireGuard) as the transport.
- akerl_ 8y agoAlgo added WireGuard support at least several months ago.
- dguido 8y agoAlgo does not have a relationship to Wireguard, but Trail of Bits does. We made a substantial donation to them prior to including Wireguard support in Algo. You can find us on their donation page here: https://www.wireguard.com/donations/ https://www.wireguard.com/donations/
- StavrosK 8y agoI was in the same boat, hopefully this will help: https://www.stavros.io/posts/how-to-configure-wireguard/ https://www.stavros.io/posts/how-to-configure-wireguard/ It's actually very easy to set up, I don't know why the official docs make it seem super hard.
- kohtatsu 8y agoWhat's the reasoning behind embedding the private keys directly in the config?
- StavrosK 8y agoMostly convenience, since it's a "getting started" guide. I'd prefer a better way than the config file to specify devices, but unfortunately there isn't one right now. Maybe I should write a WireGuard config manager tool.
- slim 8y agoyou have to store them somewhere with appropriate access rights anyway. Since the config is mainly a private key and an ip address it makes sense to not complicate the setup with another file to manage
- sercand 8y agoI am still trying to figure it out how to setup a Wireguard server on Kubernetes/GKE to personal use. Outline and OpenVPN clients have some problems that's why I want to try Wireguard.
- y4mi 8y agoIs that even possible? I thought Wireguard was essentially a kernel module... Which is basically the only thing you can't dockerize, as the kernel is shared between all containers? Could be mistaken though .. not sure
- AsyncAwait 8y agoCloudflare has their own implementation that runs in userspace. [1] 1 - https://github.com/cloudflare/boringtun https://github.com/cloudflare/boringtun
- andyonthewings 8y agoThere is also an official user space implementation. The performance is not bad at all. [1] https://github.com/WireGuard/wireguard-go https://github.com/WireGuard/wireguard-go.
- alchemism 8y agoYou could put it in a micro VM in the same VPC as the GKE cluster, and then have a 2019-grade bastion host.
- bubblethink 8y ago>I consider myself fairly competent, and I couldn’t understand the wireguard documentation enough to setup my own install without resorting to algo [0] a) wg is already quite straightforward and will likely get even simpler with broader adoption. Can't comment on what you did not understand about it. A statement starting with "I consider myself competent" is really not helping your case b) You are somehow confusing the simplicity of a client set up with the actual simplicity of the overall server and client setup. Client setups have generally been simple with a number of vpn solutions even before wireguard. c) There is no democratization of technology going on here. vpn service providers have existed since the dawn of time, and you could always pay and get a client config file.
- 7ewis 8y agoWhen did Algo get WireGuard support? Used to use Streisand as it has more protocols, but WireGuard is all I would want now. Might have to set this up again!