3 ms·
Why would people consider using it over "regular WireGuard setup with opensshd somewhere"?
by MuffinFlavored 2y ago
Why would people consider using it over "regular WireGuard setup with opensshd somewhere"?
- betaby 2y agoPerhaps to use it as a jump host. Oftentimes running ssh via ssh is not that good performance wise.
- deleted 2y ago[deleted]
- dartos 2y agoI was wondering the same thing, but another comment on this post pointed one out. It’s clunky to distribute and rotate ssh keys, but much easier to do that with WireGuard credentials.
- yjftsjthsd-h 2y agoI'm drawing a blank; why would it be easier to rotate wg keys than ssh keys? They're both asymmetric keys that fit in one line of text, which should be generated on the client and then have the public key uploaded to the server(s), and which can be dynamically loaded at runtime. If anything, I'd think ssh was marginally easier because it supports CAs out of the box and you can just have your auth system dynamically signing the user's certificate.