Some questions about wireguard

Some questions about wireguard

[Nicolas Prochazka]

[-- Attachment #1: Type: text/plain, Size: 583 bytes --]

Hello,
wireguard seems very interesting for our deploiement.
We have some questions about it :

- how many tunnels a peer can manage ?
In our environnement, ~ 10 000 clients --> "server"|peer

- at this moment we are using , kcptun or v2ray  , chinese udp tunnel, with
differents problem
bandwitch , latency ,
how wireguard manage this ( udp tunnel from kernel ? )

- about peer key management ?
with 10 000 peer keys, how can we manage it, use wg and a database for
example ?

To finish, wireguard seems to be very impressive, just the essential
thanks.

Regards,
Nicolas Prochazka

[-- Attachment #2: Type: text/html, Size: 700 bytes --]

Re: Some questions about wireguard

[Jason A. Donenfeld]

On Wed, Feb 15, 2017 at 11:12 AM, Nicolas Prochazka
<nicolas.prochazka@gmail.com> wrote:
> - how many tunnels a peer can manage ?
> In our environnement, ~ 10 000 clients --> "server"|peer

Each interface can have 65536 peers. Each linux system can have
multiple interfaces.

(If that peer limit becomes a problem for somebody, it wouldn't be
difficult to remove it and expand it to 4294967296.)

> how wireguard manage this ( udp tunnel from kernel ? )

Not sure I understand your question. Could you rephrase?

>
> - about peer key management ?
> with 10 000 peer keys, how can we manage it

You can load the keys into the interface using wg(8). At some later
date there may be support for dynamic database stuff.

Re: Some questions about wireguard

[Nicolas Prochazka]

[-- Attachment #1: Type: text/plain, Size: 959 bytes --]

hello,
sorry for my english.
This question(udp tunnel ..)  is not relevant, I learn a lot with the read
of mailing list.
Regards,
Nicolas

2017-02-17 14:48 GMT+01:00 Jason A. Donenfeld <Jason@zx2c4.com>:

> On Wed, Feb 15, 2017 at 11:12 AM, Nicolas Prochazka
> <nicolas.prochazka@gmail.com> wrote:
> > - how many tunnels a peer can manage ?
> > In our environnement, ~ 10 000 clients --> "server"|peer
>
> Each interface can have 65536 peers. Each linux system can have
> multiple interfaces.
>
> (If that peer limit becomes a problem for somebody, it wouldn't be
> difficult to remove it and expand it to 4294967296.)
>
> > how wireguard manage this ( udp tunnel from kernel ? )
>
> Not sure I understand your question. Could you rephrase?
>
> >
> > - about peer key management ?
> > with 10 000 peer keys, how can we manage it
>
> You can load the keys into the interface using wg(8). At some later
> date there may be support for dynamic database stuff.
>

[-- Attachment #2: Type: text/html, Size: 1535 bytes --]