2 ms·

I'm looking at doing something similar: does the server actually need an IP address assigned to its wg0 interface, or can it work without one? I only need peer-

I'm looking at doing something similar: does the server actually need an IP address assigned to its wg0 interface, or can it work without one? I only need peer-to-peer.

aftbit 6y ago
Yes, because of Cryptokey routing[1]. Wireguard works at the IP level and determines which keys to use for encryption and authentication based on the destination IP. That said, if you only need peer-to-peer, you could pick any two RFC-1918 addresses like 10.0.0.1 and 10.0.0.2. 1. https://www.wireguard.com/#cryptokey-routing https://www.wireguard.com/#cryptokey-routing