Development discussion of WireGuard
 help / color / mirror / Atom feed
* linux: bridging/bonding not possible
@ 2021-10-14  2:45 uxDWzco-wg
  2021-10-14  3:25 ` Benda Xu
  2021-10-14  7:53 ` Roman Mamedov
  0 siblings, 2 replies; 4+ messages in thread
From: uxDWzco-wg @ 2021-10-14  2:45 UTC (permalink / raw)
  To: wireguard

hi.

as I understand, linux needs the ability to change hardware-addresses on
netdevs to put them into a bridge or bond, but wireguard-netdevs on
linux don't support hw-addresses at all (at least in kernel 5.10).

is it possible (or even planned) to add hw-addresses to the
wireguard-netdevs or does this interfere with the concept of wireguard?

regards

j.

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: linux: bridging/bonding not possible
  2021-10-14  2:45 linux: bridging/bonding not possible uxDWzco-wg
@ 2021-10-14  3:25 ` Benda Xu
  2021-10-14  7:53 ` Roman Mamedov
  1 sibling, 0 replies; 4+ messages in thread
From: Benda Xu @ 2021-10-14  3:25 UTC (permalink / raw)
  To: uxDWzco-wg; +Cc: wireguard

Hi uxDWzco,

uxDWzco-wg@moenia.de writes:

> as I understand, linux needs the ability to change hardware-addresses
> on netdevs to put them into a bridge or bond, but wireguard-netdevs on
> linux don't support hw-addresses at all (at least in kernel 5.10).
>
> is it possible (or even planned) to add hw-addresses to the
> wireguard-netdevs or does this interfere with the concept of
> wireguard?

Bridging is an layer 2 network concept. But wireguard is a layer 3
connection.

For more information on OSI layer model, refer to,

  https://en.wikipedia.org/wiki/OSI_model

Cheers,
Benda

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: linux: bridging/bonding not possible
  2021-10-14  2:45 linux: bridging/bonding not possible uxDWzco-wg
  2021-10-14  3:25 ` Benda Xu
@ 2021-10-14  7:53 ` Roman Mamedov
  1 sibling, 0 replies; 4+ messages in thread
From: Roman Mamedov @ 2021-10-14  7:53 UTC (permalink / raw)
  To: uxDWzco-wg; +Cc: wireguard

On Thu, 14 Oct 2021 04:45:32 +0200
uxDWzco-wg@moenia.de wrote:

> as I understand, linux needs the ability to change hardware-addresses on
> netdevs to put them into a bridge or bond, but wireguard-netdevs on
> linux don't support hw-addresses at all (at least in kernel 5.10).
> 
> is it possible (or even planned) to add hw-addresses to the
> wireguard-netdevs or does this interfere with the concept of wireguard?

Hello,

It is not a matter of hw-addresses;

Wireguard is L3 interface, transferring IPv4 and IPv6 packets.

For bridging you would need an L2 interface, which transfers Ethernet frames.

It is possible to do a bridge with WG, by using an L2-over-L3 tunnel such as
VXLAN or GRETAP over WG, and bridging that. Of course this leads to additional
overhead and MTU reduction.

If you would prefer to have an L2 VPN directly, there are other solutions such
as Tinc and OpenVPN.

-- 
With respect,
Roman

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: linux: bridging/bonding not possible
       [not found] <76173@imapsync>
@ 2021-10-14  7:12 ` wireguard
  0 siblings, 0 replies; 4+ messages in thread
From: wireguard @ 2021-10-14  7:12 UTC (permalink / raw)
  To: wireguard

Hi,

 >> is it possible (or even planned) to add hw-addresses to the
 >> wireguard-netdevs or does this interfere with the concept of wireguard?

I hope I say nothing wrong, but its not (directly) possible and probably 
not plant.

Wireguard is a so called Layer-3 VPN, bridging is a Layer-2 thing. So it 
will no work together.
But you could use an (un)secure Layer-2-VPN (like L2TP) and transport it 
through wireguard. (similar to the often used L2TP over IPsec).
You could also take a look to softether vpn 
(https://www.softether.org/), which also includes a Layer-2 VPN. But I 
have no clue about the security quality.


^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2021-10-14 15:34 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-10-14  2:45 linux: bridging/bonding not possible uxDWzco-wg
2021-10-14  3:25 ` Benda Xu
2021-10-14  7:53 ` Roman Mamedov
     [not found] <76173@imapsync>
2021-10-14  7:12 ` wireguard

Development discussion of WireGuard

This inbox may be cloned and mirrored by anyone:

	git clone --mirror https://inbox.vuxu.org/wireguard/0 wireguard/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 wireguard wireguard/ https://inbox.vuxu.org/wireguard \
		wireguard@lists.zx2c4.com
	public-inbox-index wireguard

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://inbox.vuxu.org/vuxu.archive.wireguard


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git