From: Bruno Wolff III <bruno@wolff.to>
To: Markus Woschank <markus.woschank@gmail.com>
Cc: wireguard@lists.zx2c4.com
Subject: Re: wg showconf
Date: Mon, 6 Nov 2017 10:06:14 -0600 [thread overview]
Message-ID: <20171106160614.GA27994@wolff.to> (raw)
In-Reply-To: <CAKUy5az5NX6hLDPsiUg1eoJEnJ4VK6Q2KyrKLzZ3BMAGrg2nnw@mail.gmail.com>
On Sun, Nov 05, 2017 at 01:05:18 +0100,
Markus Woschank <markus.woschank@gmail.com> wrote:
>
>I imaging specifying an endpoint IP for a peer and than discovering
>that it connected from a different IP may be surprising to some. I
>generally prefer for things to break if I configure them the wrong way
>and not work "sometimes" (wrong endpoint IP on one side but the other
>first initiating the connection most of the time).
Perhaps, but I think you are thinking about the function incorrectly. The
peer address shouldn't be looked at as a restriction, but rather as a hint
of where to send traffic to reach the peer if no traffic has been received
from it. In that light, wg's behavior makes sense. The last IP address
the peer was seen at, is normally the best place to look for it later.
prev parent reply other threads:[~2017-11-06 16:12 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-11-04 20:04 Markus Woschank
2017-11-04 20:27 ` Luis Ressel
2017-11-04 21:25 ` Markus Woschank
2017-11-04 23:01 ` Luis Ressel
2017-11-04 23:03 ` Luis Ressel
2017-11-05 0:05 ` Markus Woschank
2017-11-06 16:06 ` Bruno Wolff III [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20171106160614.GA27994@wolff.to \
--to=bruno@wolff.to \
--cc=markus.woschank@gmail.com \
--cc=wireguard@lists.zx2c4.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).