3 ms·
If you don't want to suffer the performance penalty why not bridge wg0 with a veth pair where the other end is in your container?
by Spivak 3y ago
If you don't want to suffer the performance penalty why not bridge wg0 with a veth pair where the other end is in your container?
- nntwozz 3y agoPerformance is already capped with network_mode: host. I'm not a network expert but veth seems a bit much for this? My setup is less convoluted. I can WireGuard to my server and access my home network, meanwhile the torrent client data is all routed through a third party VPN. If the third party VPN disconnects there is no data leak from the torrent client (basically a kill switch).
- Spivak 3y agoTrue, but I assumed you might actually want to have the container network isolated. For most people I think they consider --privileged and host networking a last resort for misbehaving software.