Re:WireGuard Gives Linux a Faster, More Secure VPN
by thayne on Tuesday March 03, 2020 @12:21AM
(#22472021)
I don't have a problem with it being layer 3 rather than layer 2. But the lack of dynamic configuration is a bit of an issue. I don't care too much about needing static ip addresses, but I do want to be able to push down dynamic routes and dns servers to clients.
[ Parent
| on HN ]
Re:WireGuard Gives Linux a Faster, More Secure VPN
by nekeo0 on Tuesday March 03, 2020 @10:39PM
(#22481026)
That it doesn’t act as a DHCP server or anything but what it’s for is my main reason for loving it.
Logical functionality should be decoupled to ease maintenance, reduce risk from complexity.
Config management tools can dump some text in a file for corporate needs.
Apply it over SSH or via git.
It’s just a bit of text to lay down.