News for hackers. Stuff that matters.
Re:Simple WireGuard Docker network setup by jxcl on Thursday September 24, 2020 @06:01PM (#24584184)
> If you use a DNS name as an endpoint, and that DNS entry changes, you have to refresh it.

This is really frustrating for me. If you put a DNS name as a peer endpoint, wg-quick will resolve the name and then _replace the name with the ip address_. My IP address changes frequently and I have a script to update the A record when it does, but wireguard didn't have built in support for just keeping the domain name around when I last looked.

Re:Simple WireGuard Docker network setup by 3np on Thursday September 24, 2020 @06:45PM (#24584562)
I haven't been arsed to do it yet, but I'm often concurrently connected to separate wireguard subnets with their own dns so the sane thing to do would be to run a local dnsmasq and map it there instead.
Re:Simple WireGuard Docker network setup by jlgaddis on Friday September 25, 2020 @07:24AM (#24588664)
What's the alternative? Allow the Wireguard user to specify an FQDN in the config file and require Wireguard to perform a DNS query on every outgoing packet to check if the data in the RR has changed?
Re:Simple WireGuard Docker network setup by tecleandor on Friday September 25, 2020 @07:35AM (#24588724)
You could honor the TTL, that's why it exists. Just one DNS query every 1min, 5min, 1hour... whatever TTL you have.