Multihoming?

Multihoming?

[Alex Besogonov]

Hi, list!

I’ve read the source code Wireguard implementations and it appears that true multihoming seems to be impossible with the current protocol. By true multihoming I mean possibility of using multiple connections at the same time, preferably with configurable rates for them on both sides.

A typical use-case would be a small office using two independent ISPs to connect to a Wireguard server, so that failure of one of them would not cause service interruption. Or a mobile user with an LTE and WiFi connections used simultaneously.

Any ideas on how this could be implemented?

Re: Multihoming?

[Justin Kilpatrick]

Using multiple connections at once is fraught with problems in the first place (see the complexities of teaming and bonding nics) but you can do a simple failover system using Babeld + Wireguard

Althea uses this for failover. In earlier versions of Wireguard it was quite bad (60 second switch times) but more recently handshake re-negotiation is triggered on the fly.

The whole process for Babel to detect the failure, reroute to some other Babeld node advertising the same IP and then for that Wireguard server and the client to renegotiate and get traffic flowing takes only a few seconds (about 5 in my experience). 

-- 
  Justin Kilpatrick
  justin@althea.net

On Tue, Mar 31, 2020, at 3:22 AM, Alex Besogonov wrote:
> Hi, list!
> 
> I’ve read the source code Wireguard implementations and it appears that 
> true multihoming seems to be impossible with the current protocol. By 
> true multihoming I mean possibility of using multiple connections at 
> the same time, preferably with configurable rates for them on both 
> sides.
> 
> A typical use-case would be a small office using two independent ISPs 
> to connect to a Wireguard server, so that failure of one of them would 
> not cause service interruption. Or a mobile user with an LTE and WiFi 
> connections used simultaneously.
> 
> Any ideas on how this could be implemented?

Re: Multihoming?

[Jason A. Donenfeld]

On Sat, Apr 4, 2020 at 4:45 PM Alex Besogonov <alex.besogonov@gmail.com> wrote:
> By true multihoming I mean possibility of using multiple connections at the same time, preferably with configurable rates for them on both sides.

Both connections at the same time, configurable rates... seems a bit
out of scope for an encrypted tunnel, doesn't it?

Rather, set up two tunnels, and then bond them or run some other
aggregation protocol over it. Several years ago I was aggregating
several different internet connections using MPTCP over various pipes.
Things worked extraordinarily well.