Warp – Mobile VPN

Re:Warp – Mobile VPN by Shank on Monday April 01, 2019 @12:01PM (#19544724)

I consider myself fairly competent, and I couldn’t understand the wireguard documentation enough to setup my own install without resorting to algo [0]. There’s real value in wrapping a system like WireGuard into a product, because it democratizes technology rather than making it available only to those knowledgable enough to understand how to set it up. I think Warp is great in that regard.

[0]: https://github.com/trailofbits/algo

[ Parent | on HN ]

Re:Warp – Mobile VPN by StavrosK on Monday April 01, 2019 @12:36PM (#19545154)

I was in the same boat, hopefully this will help:

https://www.stavros.io/posts/how-to-configure-wireguard/

It's actually very easy to set up, I don't know why the official docs make it seem super hard.

[ Parent | on HN ]

Re:Warp – Mobile VPN by kohtatsu on Monday April 01, 2019 @12:51PM (#19545313)

What's the reasoning behind embedding the private keys directly in the config?

[ Parent | on HN ]

Re:Warp – Mobile VPN by StavrosK on Monday April 01, 2019 @12:58PM (#19545414)

Mostly convenience, since it's a "getting started" guide. I'd prefer a better way than the config file to specify devices, but unfortunately there isn't one right now. Maybe I should write a WireGuard config manager tool.

[ Parent | on HN ]

Re:Warp – Mobile VPN by slim on Tuesday April 02, 2019 @01:50AM (#19551396)

you have to store them somewhere with appropriate access rights anyway. Since the config is mainly a private key and an ip address it makes sense to not complicate the setup with another file to manage

[ Parent | on HN ]

Re:Warp – Mobile VPN by 7ewis on Monday April 01, 2019 @04:24PM (#19547830)

When did Algo get WireGuard support? Used to use Streisand as it has more protocols, but WireGuard is all I would want now.

Might have to set this up again!

[ Parent | on HN ]

Re:Warp – Mobile VPN by TimTheTinker on Monday April 01, 2019 @01:31PM (#19545803)

> I couldn’t understand the wireguard documentation enough to setup my own install without resorting to algo

Not sure what you mean. Algo has no relationship to WireGuard; it's basically a customized StrongSwan setup under the hood, which utilizes IKEv2 (not WireGuard) as the transport.

[ Parent | on HN ]

Re:Warp – Mobile VPN by dguido on Monday April 01, 2019 @05:48PM (#19548659)

Algo does not have a relationship to Wireguard, but Trail of Bits does. We made a substantial donation to them prior to including Wireguard support in Algo. You can find us on their donation page here: https://www.wireguard.com/donations/

[ Parent | on HN ]

Re:Warp – Mobile VPN by akerl_ on Monday April 01, 2019 @01:58PM (#19546131)

Algo added WireGuard support at least several months ago.

[ Parent | on HN ]

Re:Warp – Mobile VPN by sercand on Monday April 01, 2019 @02:46PM (#19546691)

I am still trying to figure it out how to setup a Wireguard server on Kubernetes/GKE to personal use. Outline and OpenVPN clients have some problems that's why I want to try Wireguard.

[ Parent | on HN ]

Re:Warp – Mobile VPN by alchemism on Monday April 01, 2019 @05:07PM (#19548247)

You could put it in a micro VM in the same VPC as the GKE cluster, and then have a 2019-grade bastion host.

[ Parent | on HN ]

Re:Warp – Mobile VPN by y4mi on Monday April 01, 2019 @03:29PM (#19547196)

Is that even possible? I thought Wireguard was essentially a kernel module... Which is basically the only thing you can't dockerize, as the kernel is shared between all containers?

Could be mistaken though .. not sure

[ Parent | on HN ]

Re:Warp – Mobile VPN by AsyncAwait on Monday April 01, 2019 @06:12PM (#19548860)

Cloudflare has their own implementation that runs in userspace. [1]

1 - https://github.com/cloudflare/boringtun

[ Parent | on HN ]

Re:Warp – Mobile VPN by andyonthewings on Tuesday April 02, 2019 @04:57AM (#19552227)

There is also an official user space implementation. The performance is not bad at all.

[1] https://github.com/WireGuard/wireguard-go.

[ Parent | on HN ]