News for hackers. Stuff that matters.

A comment on Setting up a home VPN server with WireGuard. Parent comment

Re:Setting up a home VPN server with WireGuard by eeZah7Ux on Saturday November 02, 2019 @08:58AM (#21427403)
Complexity is the n.1 enemy of security and IPsec is horribly complex.

Wireguard is very lean and simple.

[ Parent | on HN ]
Re:Setting up a home VPN server with WireGuard by kazen44 on Saturday November 02, 2019 @05:17PM (#21430150)
ipsec is complex because it can be used in a LOT of situations.

can wireguard do tunnel state detection? Can i do a hub and spoke topology with wireguard? or auto-vpn?

ipsec is complex because it is mainly designed as a tunnel protocol with encryption. (site-to-site), compared to the "road warrior" setup wireguard seems more useful for.

[ Parent | on HN ]
Re:Setting up a home VPN server with WireGuard by labawi on Monday November 04, 2019 @04:42AM (#21440132)
Things you can't do with wireguard (unless you use workarounds like iptables, etc):

* bind a tunnel to a certain interface/ip

* use same port for different tunnels (with same ip or separate iface/ip)

* specify a fixed peer ip/port (or network, interface to use)

* use tunnel in tunnel (with kernel implementation, unless you get creative)

[ Parent | on HN ]
Re:Setting up a home VPN server with WireGuard by eeZah7Ux on Sunday November 03, 2019 @05:31PM (#21437188)
Yes to all the questions.
[ Parent | on HN ]