Wg-access-server: An all-in-one WireGuard VPN solution with a web UI

Re:Wg-access-server: An all-in-one WireGuard VPN solution wi... by tyingq on Friday October 01, 2021 @05:11PM (#28723421)

There seems to be a relative explosion in end-user deployable overlay networks in the last few years. I wonder how many, especially non-tech companies, have end users routing the outside world in without company permission.

I know it's not rocket science to watch for each one, or be more sophisticated with deep packet inspection. But, I've worked at some old stodgy companies, and I'm reasonably sure they aren't really watching for it in a lot of places.

[ Parent | on HN ]

Re:Wg-access-server: An all-in-one WireGuard VPN solution wi... by iso1210 on Friday October 01, 2021 @06:00PM (#28723852)

This has been a threat for 20+ years, certainly everyone I worked with had outgoing ssh tunnels through the socks proxy, with reverse port forwarding, back then.

If your network is reliant on a high firewall and nothing inside, you've already lost.

[ Parent | on HN ]

Re:Wg-access-server: An all-in-one WireGuard VPN solution wi... by tyingq on Friday October 01, 2021 @06:07PM (#28723909)

Yes, I'm not saying it is a new threat. Just a broader threat now that there's a lot of ready made solutions that can run in user space. And in some cases, like this one, have very newbie friendly UIs.

[ Parent | on HN ]

Re:Wg-access-server: An all-in-one WireGuard VPN solution wi... by Spooky23 on Friday October 01, 2021 @06:18PM (#28723991)

Depends on the company. Stuff like Crowdstrike and the more advanced Defender service spot this sort of thing.

SSH is probably the best one, especially as you can usually get policy exceptions to access cloud resources.

[ Parent | on HN ]