7 ms·
There is a mention of WireGuard tunnels being point to point. This is true in that there is an encrypted point to point tunnel between each peer; however, the n
by tssva 5y ago
There is a mention of WireGuard tunnels being point to point. This is true in that there is an encrypted point to point tunnel between each peer; however, the network model implemented by WireGuard is a non-broadcast multiple access (NBMA) model. Similar to X.25 or framerelay. A network model similar to point to point can be implemented via WireGuard by assigning a single peer to a WireGuard interface and adjusting the allowed ips for that peer to include multicast addresses.
The NBMA model is just one of the obstacles one faces when trying to implement dynamic routing over WireGuard interfaces. Honestly it becomes complicated enough that setting up IPsec properly and securely is much less complicated and error prone.