Wg-access-server: An all-in-one WireGuard VPN solution with a web UI

Re:Wg-access-server: An all-in-one WireGuard VPN solution wi... by xxpor on Friday October 01, 2021 @08:24PM (#28724833)

Setting up the FW and routing is not trivial for anyone who hasn't had to deal with that aspect of Linux before. 99% of people are going to want a straightforward tunnel that simply forwards everything to the default route table of the server. Which is of course what the linked script does. But even experienced devs are doing to have no idea what the heck a prerouting chain or a masquerade rule does.

[ Parent | on HN ]

Re:Wg-access-server: An all-in-one WireGuard VPN solution wi... by 3np on Saturday October 02, 2021 @02:08AM (#28726366)

I've done that journey.

At least for me, a major issue turned out to the abstractions (like wg-quick, ufw, network-manager, openwrt) which on one hand obscure the inner workings but at the same time are limited enough that at some point you will be forced to dig deeper. They also don't always play nicely together wrt routes, routing polices and *tables rules.

I wasted so much time (probably weeks, added together) in my younger days banging my head against the wall with Linux networking. Throwing out other high-level tools/frameworks and starting "from scratch" on CentOS/Rocky/Debian with only systemd-networkd and nftables has now made me mostly comfortable and I finally feel in control of the networking stack on my Linux boxes. I say "mostly" because, well, Docker and CNI...

Oh, and see my sibling comment.

[ Parent | on HN ]

Re:Wg-access-server: An all-in-one WireGuard VPN solution wi... by jamal-kumar on Tuesday October 05, 2021 @11:18AM (#28760611)

Just use OpenBSD, so much of that crap just gets out of the way because it was never glued on without anyone asking. For routing stuff like VPNs and routers especially this becomes my first choice, unless we're really needing to hit gigabit speeds... Try fresh air for once!

[ Parent | on HN ]