4 ms·

I hope Wireguard makes it into iOS/macOS at some point. Still early days relative to other protocols of course but it's so much simpler and more reliable (even

by xoa 4y ago

I hope Wireguard makes it into iOS/macOS at some point. Still early days relative to other protocols of course but it's so much simpler and more reliable (even beyond the security benefits). I use it extensively on both platforms for access to my own networks and services nowadays.

KindOne 4y ago
It already exists in the App Store. I've been using it since April 28th of this year. ios/ipad: https://apps.apple.com/us/app/wireguard/id1441195209 https://apps.apple.com/us/app/wireguard/id1441195209 macos: https://apps.apple.com/us/app/wireguard/id1451685025 https://apps.apple.com/us/app/wireguard/id1451685025
isatty 4y ago
WireGuard is already available on both platforms - or do you mean kernel space WireGuard without an additional app? Fwiw the existing app integrates seamlessly into the apple ecosystem.
- mdeeks 4y ago
  I think the OP means so that it can be used without an app and so it can be used with Apple's "Always On VPN" setup. Right now I believe "Always On VPN" only works with the OS supported VPNs: IKEv2, L2TP, SSL VPN, and Cisco IPSEC https://support.apple.com/guide/deployment/vpn-overview-depae3d361d0/1/web/1.0 https://support.apple.com/guide/deployment/vpn-overview-depa...
  - happyopossum 4y ago
    Nope, there are a ton of 3rd party SSL/other VPN clients that use the same frameworks that can be set to always on - the app just has to be written that way. Consumer VPNs typically aren't.
    - mdeeks 4y ago
      My mistake! The docs I linked weren't clear about it.
  - isatty 4y ago
    The WireGuard app works with always on.
codedokode 4y ago
- matthewmacleod 4y ago
  There are several things wrong with this - to start with, WireGuard isn’t in the iOS kernel.
- mbreese 4y ago
  Changes to macOS and iOS a few versions back removed third party kernel extensions. So, that’s not an issue anymore. It used to be a huge issue, but thankfully that’s been fixed. I can’t tell you how many times my Mac crashed due to faulty “enterprise” security kexts.
- _joel 4y ago
  Well, whatever, but maybe you might like to know that it's a protocol specification, not a .ko soley and has been implemented in the user space is several languages. If you're reading every line of kernel source you compile with better knowledge than all of LKML then fair play to you!
- deleted 4y ago
  [deleted]
_joel 4y ago
It already is? It's been around for ages now and had a lot of eyes over it, but more importantly users. It's being used in a lot of services that are in production and turning over nicely. I think the 'early days' can be put to bed now, it's mature from a security perpective (imho).
Abishek_Muthian 4y ago
Here's one of those occasions where Linux mobile is shining, Wireguard(kernel) works OOB in Mobian, Requires custom kernel in postmarketOS due to Alpine quirk. Considering the added benefits of taking your other desktop Linux security configuration to mobile, A Linux mobile could be a viable choice for those who need reliable transparent security.

by xoa 4y ago

KindOne 4y ago

It already exists in the App Store. I've been using it since April 28th of this year. ios/ipad: https://apps.apple.com/us/app/wireguard/id1441195209 https://apps.apple.com/us/app/wireguard/id1441195209 macos: https://apps.apple.com/us/app/wireguard/id1451685025 https://apps.apple.com/us/app/wireguard/id1451685025

isatty 4y ago

WireGuard is already available on both platforms - or do you mean kernel space WireGuard without an additional app? Fwiw the existing app integrates seamlessly into the apple ecosystem.

mdeeks 4y ago
I think the OP means so that it can be used without an app and so it can be used with Apple's "Always On VPN" setup. Right now I believe "Always On VPN" only works with the OS supported VPNs: IKEv2, L2TP, SSL VPN, and Cisco IPSEC https://support.apple.com/guide/deployment/vpn-overview-depae3d361d0/1/web/1.0 https://support.apple.com/guide/deployment/vpn-overview-depa...
- happyopossum 4y ago
  Nope, there are a ton of 3rd party SSL/other VPN clients that use the same frameworks that can be set to always on - the app just has to be written that way. Consumer VPNs typically aren't.
  - mdeeks 4y ago
    My mistake! The docs I linked weren't clear about it.
- isatty 4y ago
  The WireGuard app works with always on.

codedokode 4y ago

matthewmacleod 4y ago
There are several things wrong with this - to start with, WireGuard isn’t in the iOS kernel.
mbreese 4y ago
Changes to macOS and iOS a few versions back removed third party kernel extensions. So, that’s not an issue anymore. It used to be a huge issue, but thankfully that’s been fixed. I can’t tell you how many times my Mac crashed due to faulty “enterprise” security kexts.
_joel 4y ago
Well, whatever, but maybe you might like to know that it's a protocol specification, not a .ko soley and has been implemented in the user space is several languages. If you're reading every line of kernel source you compile with better knowledge than all of LKML then fair play to you!
deleted 4y ago
[deleted]

_joel 4y ago

It already is? It's been around for ages now and had a lot of eyes over it, but more importantly users. It's being used in a lot of services that are in production and turning over nicely. I think the 'early days' can be put to bed now, it's mature from a security perpective (imho).

Abishek_Muthian 4y ago

Here's one of those occasions where Linux mobile is shining, Wireguard(kernel) works OOB in Mobian, Requires custom kernel in postmarketOS due to Alpine quirk. Considering the added benefits of taking your other desktop Linux security configuration to mobile, A Linux mobile could be a viable choice for those who need reliable transparent security.