News for hackers. Stuff that matters.

A comment on WireGuard for iOS. Parent comment

Re:WireGuard for iOS by e12e on Thursday December 20, 2018 @04:07PM (#18729129)
One major point over ssh is that: "WireGuard securely encapsulates IP packets over UDP." - so you avoid all the issues of tcp-over-tcp;wireguard is a "real" VPN.
[ Parent | on HN ]
Re:WireGuard for iOS by cyphar on Thursday December 20, 2018 @09:08PM (#18730957)
sshuttle doesn't pass TCP over TCP, it does some work on the "local" side before sending it over TCP so it's actually just "data-over-TCP"[1].

[1]: https://sshuttle.readthedocs.io/en/stable/how-it-works.html

[ Parent | on HN ]
Re:WireGuard for iOS by beagle3 on Friday December 21, 2018 @06:50AM (#18732798)
But still doesn’t do udp or ip, only let’s you connect out (not in, which is often desirable but still a limitation).

Also, you lose information about where connections originate - to the recipient, it all looks like it came from the sshuttle host.

[ Parent | on HN ]
Re:WireGuard for iOS by e12e on Friday December 21, 2018 @02:56AM (#18732000)
Cool, I wasn't aware of that. Still ends up doing udp over tcp, though.
[ Parent | on HN ]