4 ms·
On your last point, I have a similar problem. I'd like to use WireGuard in a large fleet but the authentication/encryption is just too barebones. You have to ge
by c7DJTLrn 5y ago
On your last point, I have a similar problem. I'd like to use WireGuard in a large fleet but the authentication/encryption is just too barebones. You have to generate a keypair for each host and then add that public key to a file on the server. In other words, you can't do it with X509 certificates.
I appreciate WireGuard is designed for simplicity but I don't see how it can scale with this limitation.
- phkahler 5y agoOther VPN software will change out their lower layers for wire guard, while keeping things like key management as is.
- stormbrew 5y agoThis is a tempting idea, and maybe it's actually happening, but I do wonder if it's a bit like the hope that git would eventually sprout 'better porcelain' that would obsolete all the clunky bash, perl, etc. scripts that it started out as. In the end most everyone who uses git puts up with the slowly improving 'mainline' porcelain and all the replacements never go anywhere. In particular, I imagine it was important for initial adoption to create the android/ios apps but it really feels like now we're stuck with the kind of clunky (super easy for the user, but super hard to get right for the admin of the network imo) flow they created.