WireGuard Gives Linux a Faster, More Secure VPN

Re:WireGuard Gives Linux a Faster, More Secure VPN by wmf on Monday March 02, 2020 @03:30PM (#22468582)

It should be possible to run GRE, L2TP, or VXLAN over WireGuard although such tooling probably doesn't exist yet.

[ Parent | on HN ]

Re:WireGuard Gives Linux a Faster, More Secure VPN by lapinot on Monday March 02, 2020 @06:26PM (#22470214)

Sure but it hurts a bit to run a tunnel on top of another tunnel, and since you have to run wireguard as-is, you still have to do the static ip thing. It's a bit insane to have ethernet > udp (l2tp) > ip > udp (wireguard) > ip > ethernet. That's at least 128 bytes overhead per frame (udp/ip: 2*48, l2tp: 4, eth: 14, wireguard: 14).

[ Parent | on HN ]

Re:WireGuard Gives Linux a Faster, More Secure VPN by bitbang on Monday March 02, 2020 @10:08PM (#22471455)

I've run VXLAN over top of wireguard connections. One advantage is that you can have multiple intermediate wireguard connections that are not visible at the VXLAN layer.

[ Parent | on HN ]

Re:WireGuard Gives Linux a Faster, More Secure VPN by ryanlol on Monday March 02, 2020 @05:25PM (#22469714)

What tooling do you need for this? Shell scripts would be the traditional approach.

[ Parent | on HN ]

Re:WireGuard Gives Linux a Faster, More Secure VPN by wmf on Monday March 02, 2020 @06:07PM (#22470074)

Yeah, as long as the shell script has been audited. It would probably be easy to accidentally send the GRE traffic in the clear instead of through WireGuard.

[ Parent | on HN ]

Re:WireGuard Gives Linux a Faster, More Secure VPN by ryanlol on Monday March 02, 2020 @07:45PM (#22470734)

Doesn’t seem that easy to fuck up, you just use internal WG IPs for the L2 tunnel. Packets just won’t go anywhere if WG is down.

[ Parent | on HN ]