6 ms·
Wg-access-server: WireGuard VPN server and web UI for device management
- teddyh 5y agoNote: This is not about WireGuard itself, but about wg-access-server, which “is a single binary file that contains a WireGuard VPN server and a web user interface for device management.”
- ape4 5y agoWireGuard itself has supported IPv6 since the start
- dang 5y agoOk, title changed to that from "WireGuard Access server now supports IPv6". Thanks!
- tehbeard 5y agoAlso of note is that this is a fork of wg-access-server from the looks of it.
- Zdh4DYsGvdjJ 5y agoYes, it's a fork as the original project is dead for a year already.
- TheGoliath 5y agoWe used the Upstream project for a while, but we were missing some features like IPv6, so we started this fork and added them ourselves, hoping it would be useful for a few others as well.
- gravypod 5y agoThis would be great if it automatically generated `<device>.<user>.search.domain.vpn` DNS names for all of the devices.
- encryptluks2 5y agoSomething like this would be amazing.
- TheGoliath 5y agoYou can create a new issue with the feature request. Alternatively PRs are always welcome :P
- easton 5y agoThis is a thing in Netmaker, another WireGuard server that is being built by a YC startup: https://github.com/gravitl/netmaker https://github.com/gravitl/netmaker
- dhc02 5y agoTailscale does a version of this.
- Zdh4DYsGvdjJ 5y agoAlso see: https://github.com/freifunkMUC/wg-access-server/blob/master/TODO.md https://github.com/freifunkMUC/wg-access-server/blob/master/...
- daemoens 5y agoShout-out to PiVPN. It doesn't have a web ui but it's incredibly quick to setup and any commands are extremely basic. Took me less than 5m to setup and haven't had to touch it in almost a year.
- rythmshifter03 5y agoI’d love to know how to deploy this with WireHole
- nvr219 5y agoI decided to just use adguard dns for my wireguard and it's Good Enough for my needs.
- paulkon 5y agoWhat is the recommend wireguard mesh solution where peers can easily join and leave and shortest connection paths are automatically determined? I want to setup a way to access my mobile home office subnet (behind cellular which doesn't allow incoming) and two other subnets sites and some mobile devices which come and go.
- klysm 5y agoI don’t think wireguard will do that shortest path routing for you. Look into babel routing protocol and friends.
- Youden 5y agoWireGuard on its own doesn't do that. WireGuard only sets up tunnels between peers. If you want something like you describe, you need another product that integrates WireGuard. It's a bit boring but in a situation like yours the most straightforward way would be to set up WireGuard gateways at each of your sites and have them talk to each other and the mobile devices.
- lima 5y agoTailscale works perfectly for this. There's a third party open source server, too: https://github.com/juanfont/headscale https://github.com/juanfont/headscale (I just use the free hosted backend, obviously you trust them to do the key exchange)
- xoa 5y agoHave you taken a look at Nebula [0]? Might fit your needs. It also uses the Noise Protocol Framework but adds the bells and whistles on top needed to synthesize an overlay network like you want. MIT licensed too fwiw, full self hosting. Worth a look at any rate, WireGuard is much lower level though I'm sure it could be built upon for the same purpose. ---- 0: https://github.com/slackhq/nebula https://github.com/slackhq/nebula
- mike_d 5y agohttps://zerotier.com/ https://zerotier.com/ The managed backend/NAT broker is free up to 50 machines, or you can run the open source server yourself.
- wpietri 5y agoWell this is not the kind of thing I want to see in a tool I'm using to secure my networks: > This is a fork of the original work of place1. Since the upstream is currently poorly maintained, we try to add new features and keep the project up to date and in a working state.
- gurjeet 5y agoSo ask the developer how you can pay them to get the support you want.
- wpietri 5y agoI think it's ok that there are things I don't want. There's no reason for me to offer money for it to be something different than the author intends.
- place1 5y agowg-access-server was a hobby project i put together because I was interested in wireguard and wanted something for my home network. i opensourced it so that others could see it and perhaps use it for inspiration which this fork seems to be doing :)
- wpietri 5y agoGlad to hear it. And no need to read what I wrote as criticism. It's just me deciding I'm not in the audience for it. It sounds like you're clear on who your audience is, and generally that's the only criticism you should care much about.
- weejewel 5y agoAlso check out wg-easy: https://github.com/weejewel/wg-easy https://github.com/weejewel/wg-easy. Much more beautiful imo.
- Zdh4DYsGvdjJ 5y agoBut does it support multi tenant?
- nousrnm 5y agoInstalled on my home server few days ago. Very good and easy to manage
- johnchristopher 5y ago> Gravatar support. What ? Yeah, no. edit: or at least it should be opt-in for client
- tyingq 5y agoThere's not much to it: if (client.name.includes('@') && client.name.includes('.')) { client.avatar = `https://www.gravatar.com/avatar/${md5(client.name)}?d=blank`;
- BHSPitMonkey 5y agoI think people might not like this since it causes your clients to "phone home" to Gravatar unnecessarily/expectedly. It's a little out of place for what is essentially a network security application.
- dynamohk 5y agoI find tailscale simple and setup exit node easy
- KennyBlanken 5y agoLooks very neat. What's userland wireguard performance like? I can't seem to find much talking about this, just that it's "slower". My guess is that it's probably not an issue for a 5-10Mbit-upstream home connection?