3 ms·

I use WireGuard. As you add more keypairs, it becomes a bit of a nightmare to maintain, though Vim with syntax highlighting helps a lot. Because of this, I'll

• chgs 2y ago
  It depends on your use case. I use wg back to two geographically independent locations, keys are managed via our ipam. I don’t need EW traffic over the VPN, very NS based. Something like Headscale or another SDWan solution (automatically establishing vpn routes) would make sense if I needed to transport a lot of traffic E-W, that’s just not a requirement