logoalt Hacker News

gonzalohmtoday at 6:31 PM3 repliesview on HN

Or just use wireguard directly. I get it that it's a pain in the ass to configure it, but there are plenty of open source config generators


Replies

bradfitztoday at 6:34 PM

(Author here)

WireGuard doesn't do NAT traversal. That's the main thing this adds. And this also adds a CLI tool + library to do streams over WireGuard w/o installing kernel routings, requiring root, etc.

zikduruqetoday at 7:51 PM

> it's a pain in the ass to configure it

Public/private key pairs are hard? It's no more terrible than other projects that require configs.

mystifyingpoitoday at 6:43 PM

> pain in the ass to configure it

Idk? I found it pretty easy to configure by blindly following the tutorials and copy-pasting keys. The only footgun is the keepalive setting, which will screw up the tunnel if one end is behind NAT, that tripped me hard, but besides this, no issues at all.