5 ms·

why the wireguard step?

• adtac 2y ago
  everything works fine with just tmux + mosh, but I like to bind sshd on the wireguard interface so that there aren't any listening ports accessible from the public internet
  • blueflow 2y ago
    ... except for the UDP port where wireguard receives its pakets.
    • adtac 2y ago
      yes, but wireguard is undetectable because the server won't reply to packets that fail auth whereas sshd will respond (with a banner!) to anyone who comes knocking stealth is basically impossible with TCP