3 ms·
ipsec is complex because it can be used in a LOT of situations. can wireguard do tunnel state detection? Can i do a hub and spoke topology with wireguard? or a
by kazen44 7y ago
ipsec is complex because it can be used in a LOT of situations.
can wireguard do tunnel state detection? Can i do a hub and spoke topology with wireguard? or auto-vpn?
ipsec is complex because it is mainly designed as a tunnel protocol with encryption. (site-to-site), compared to the "road warrior" setup wireguard seems more useful for.
- eeZah7Ux 7y agoYes to all the questions.
- labawi 7y agoThings you can't do with wireguard (unless you use workarounds like iptables, etc): * bind a tunnel to a certain interface/ip * use same port for different tunnels (with same ip or separate iface/ip) * specify a fixed peer ip/port (or network, interface to use) * use tunnel in tunnel (with kernel implementation, unless you get creative)