* dynamic peer configuration over socket?
@ 2021-03-16 21:28 Christian Schmitt
0 siblings, 0 replies; only message in thread
From: Christian Schmitt @ 2021-03-16 21:28 UTC (permalink / raw)
currently I'm toying a little bit with wireguard and found the
configuration really really simple.
at the moment I'm using openvpn and want to replace it. with openvpn we
dynamically add peers by using the management api.
we have a watcher program that listens the management sockets and
watches until openvpn sends us something like
> MGMT: connect client:
we than need to respond with either client-kill or client-auth
this is extremly helpful because it means we can have a database where
all our peer configuration is held and openvpn asks if the client allowed.
I could not find something like that with wireguard, the only way I
would find, if our service would poll for new configuration and apply it
if wireguard does not know the peer, but this is error prone and does
not work in my ha topology that well. is there something planned to make
that happen? it's btw. also painful to manage such a big config with
hundreds of client peers.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2021-03-17 3:24 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-03-16 21:28 dynamic peer configuration over socket? Christian Schmitt
Development discussion of WireGuard
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://inbox.vuxu.org/wireguard/0 wireguard/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 wireguard wireguard/ http://inbox.vuxu.org/wireguard \
Example config snippet for mirrors.
Newsgroup available over NNTP:
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git