[spike] WireGuard VPN protocol research

magma / domain-proxy

A Domain proxy for Magma

BSD 3-Clause "New" or "Revised" License

1 stars 6 forks source link

[spike] WireGuard VPN protocol research #423

Open xbend opened 2 years ago

xbend commented 2 years ago

Please analyze the documentation for WireGuard protocol and see what are the different ways a wireguard connection could be established.

We were introduced to peer to peer config, but that requires that each peer knows each-other public IPs. This will be difficult to overcome in Gateway usecase, as Gateways are behind NAT.

Please experiment with a local setup.

xbend commented 2 years ago

It is hard to estimate this task. We are setting 8 for a start, but it could take less/more.

jkmar commented 2 years ago

Summary of the findings so far:

Only one of the peers need to know the others endpoint establish connection
PeersistentKeepalive option can be used to negate address change effects