Remote Debian installation assistance for newbies using WireGuard VPN

2018-04-25 Thread ST
Hello Debian Install System Team, there used to be Linux install parties - a very cool event in itself and a way to bring new users into community. However it is not so easy to organize and it is somewhat limiting in time and space. Several weeks ago I learned about the kernel-space VPN -

Re: Interface's Address is not saved when SaveConfig = true in config

2018-04-24 Thread ST
tro? Version? > > -- > Sent from my telephone. > > > On Fri, Apr 20, 2018, 12:36 ST <smn...@gmail.com> wrote: > > Hello, > > I have > ... > Address = 192.168.4.1/24 > SaveConfig = true > in wg0.conf &

Re: Interface's Address is not saved when SaveConfig = true in config

2018-04-21 Thread ST
Debian 8 Jessie iproute2/oldstable,now 3.16.0-2 amd64 On Fri, 2018-04-20 at 21:39 +, Jason A. Donenfeld wrote: > Out of date iproute2? > > > Which distro? Version? > > -- > Sent from my telephone. > > > On Fri, Apr 20, 2018, 12:36 ST <smn...@gma

Interface's Address is not saved when SaveConfig = true in config

2018-04-20 Thread ST
Hello, I have ... Address = 192.168.4.1/24 SaveConfig = true in wg0.conf 1. if I add a peer with `wg set wg0 peer ...` WG doesn't add it immediately to the wg0.conf file, only after I run `wg-quick down wg0`. Why not? What happens if the system crashes unexpectedly?... The peer will not be

Re: SFTP-based VPN bootstrapping with automatic collision-free IPs assignment/peers' public data sharing

2018-04-18 Thread ST
What uses unauthenticated TCP - your demo.wireguard.com script or DHCP? On Wed, 2018-04-18 at 06:04 +0200, Jason A. Donenfeld wrote: > The problem is that it uses unauthenticated TCP. ___ WireGuard mailing list WireGuard@lists.zx2c4.com

Re: SFTP-based VPN bootstrapping with automatic collision-free IPs assignment/peers' public data sharing

2018-04-17 Thread ST
Hi Jason, On Mon, 2018-04-16 at 00:37 +0200, Jason A. Donenfeld wrote: > Hi ST, > > It's a cool idea using the file system like that (the sticky bit would > make the permissions part work correctly, perhaps), though I wonder if > it's a bit complicated. If the model you're

Re: SFTP-based VPN bootstrapping with automatic collision-free IPs assignment/peers' public data sharing

2018-04-16 Thread ST
: > Hi ST, > > It's a cool idea using the file system like that (the sticky bit would > make the permissions part work correctly, perhaps), though I wonder if > it's a bit complicated. If the model you're after is simply "server > allocates IPs for peers already kno

SFTP-based VPN bootstrapping with automatic collision-free IPs assignment/peers' public data sharing

2018-04-15 Thread ST
Hi, after recent searching/thinking about how to span a VPN from a single publicly visible server with automatic collision-free IPs assignment/peers' public data sharing, I came to following scheme. Please provide your feedback on what possible improvements/security holes/pitfalls might be...

Re: Sharing peer data

2018-04-15 Thread ST
On Sun, 2018-04-15 at 01:15 +0200, Jason A. Donenfeld wrote: > Hi Luiz, > > You could indeed arrange for something like this, either directly -- > if both IPs are accessible Which IPs do you mean here? Public IPs or private VPN IPs (i.e. those defined within WireGuard configuration)? I got an

WireGuard integration with a DHCP server/client or other automatic provisioning

2018-04-13 Thread ST
Hello, as mentioned earlier I'm looking for ways to automate IPs assignment and more general - addition of new peers into a VPN through a central WG server. It was suggested to use DHCP server/client. Are there tutorials somewhere on how to do that? Maybe you are aware of other

Re: wg-ip, a tool to assign automatic ip addresses to wireguard interfaces

2018-04-12 Thread ST
> from https://lists.zx2c4.com/pipermail/wireguard/2018-April/002595.html: > > PS: you write that the "tool does not handle collisions", but does it > > recognize and/or warn about them? I.e. if a peer with the newly > > suggested IP exists already - will it warn? > > No, no detection is

Re: wg-ip, a tool to assign automatic ip addresses to wireguard interfaces

2018-04-10 Thread ST
PS: you write that the "tool does not handle collisions", but does it recognize and/or warn about them? I.e. if a peer with the newly suggested IP exists already - will it warn? For automation it would be nice to have some sort of "force" or "keep-trying" options, so the tool regenerates the keys

Re: wg-ip, a tool to assign automatic ip addresses to wireguard interfaces

2018-04-10 Thread ST
Hi Christophe-Marie, I'm interested in it being integrated into WG, as it is exactly what I asked for in this list several weeks ago. Thank you! On Tue, 2018-04-10 at 14:32 +0200, Christophe-Marie Duquesne wrote: > Hi, > > In an old thread [1], danrl suggested deriving node addresses from the

Re: add/remove a peer

2018-03-26 Thread ST
On Mon, 2018-03-26 at 20:46 +0200, Luis Ressel wrote: > Hello, > > Low-level tools such as wg aren't the right place for the "automagic" > features you're suggesting. wg should have simple, bugproof code and > behave reliably and predictably so that it can serve as a solid > foundation for all

Re: WG: ideas/features

2018-03-26 Thread ST
On Mon, 2018-03-26 at 15:15 -0400, wiregu...@eldondev.com wrote: > On Mon, Mar 26, 2018 at 08:17:17PM +0300, ST wrote: > > 1. Labels. > > > > Is it possible to add an optional label to a peer to make it a bit more > > usable for humans (who tend not to rem

WG: ideas/features

2018-03-26 Thread ST
Hello, as I mentioned before I'm learning WireGuard and there are certain things that I need but didn't find them yet in the docs (either because I didn't read enough yet or because it's just not there). I'll list them here and you'll tell whether it is worth for a new feature or not; or whether

Re: add/remove a peer

2018-03-26 Thread ST
On Sun, 2018-03-25 at 21:17 +0200, Kalin KOZHUHAROV wrote: > On Sun, Mar 25, 2018 at 8:10 PM, ST <smn...@gmail.com> wrote: > > PS: if you have over 100 peers it is a bit a headache to find a free IP > > when adding a new peer. There is no reason WG could not scan through IPs

Re: add/remove a peer

2018-03-25 Thread ST
On Mon, 2018-03-26 at 00:43 +0800, Wang Jian wrote: > 2018-03-25 3:32 GMT+08:00 ST <smn...@gmail.com>: > > Hello, > > > > I'm learning WireGuard and have a question regarding adding/removing a > > peer. > > > > Is there something like: > > >

Re: add/remove a peer

2018-03-25 Thread ST
On Mon, 2018-03-26 at 00:43 +0800, Wang Jian wrote: > 2018-03-25 3:32 GMT+08:00 ST <smn...@gmail.com>: > > Hello, > > > > I'm learning WireGuard and have a question regarding adding/removing a > > peer. > > > > Is there something like: > > >

add/remove a peer

2018-03-24 Thread ST
Hello, I'm learning WireGuard and have a question regarding adding/removing a peer. Is there something like: 1) wg add peer ABCDEF... allowed-ips 192.168.88.0/24 endpoint 209.202.254.14:8172 and by default, if some(/all) values are not provided - WG will generate them on its own. E.g. if IP is

link disappears

2018-03-22 Thread ST
Hello, I'm new to networking in general and VPN in particular but need to setup infrastructure to be able to SSH easily to several people who are behind routers (NAT). After reading that WireGuard is super simple - I decided to give it try. It indeed turned out to be simple till now. I setup a