From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Jason@zx2c4.com Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id ea53c2b8 for ; Fri, 8 Dec 2017 04:16:45 +0000 (UTC) Received: from frisell.zx2c4.com (frisell.zx2c4.com [192.95.5.64]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id f7136feb for ; Fri, 8 Dec 2017 04:16:45 +0000 (UTC) Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTP id bd7f0ce3 for ; Fri, 8 Dec 2017 04:16:45 +0000 (UTC) Received: by frisell.zx2c4.com (ZX2C4 Mail Server) with ESMTPSA id 0a556c56 (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128:NO) for ; Fri, 8 Dec 2017 04:16:44 +0000 (UTC) Received: by mail-ot0-f180.google.com with SMTP id 103so8263405otj.12 for ; Thu, 07 Dec 2017 20:23:51 -0800 (PST) MIME-Version: 1.0 In-Reply-To: <4B7E0154-039F-4008-9C47-C825E1474731@lonnie.abelbeck.com> References: <4B7E0154-039F-4008-9C47-C825E1474731@lonnie.abelbeck.com> From: "Jason A. Donenfeld" Date: Fri, 8 Dec 2017 05:23:49 +0100 Message-ID: Subject: Re: [patch] wg: add support for peer names using a file in userspace To: Lonnie Abelbeck Content-Type: text/plain; charset="UTF-8" Cc: WireGuard mailing list List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Hi Lonnie, Thanks for sending this to the mailing list. Indeed it got lost in the fold of disorganized email filters when you sent it to me directly twice earlier; sorry about that. I'm not certain this is the right approach -- having wg(8) rely on fixed filesystem paths, and splitting peer configuration information across three places (original config file, peer data file, kernel). I think the way forward for this kind of feature would be what I proposed in an earlier thread, of attaching it to the kernel object, just like ifalias does or netfilter's comment target. However, the question I'm still faced with is -- is this really necessary? I understand that it's _cool_, and adding bells and whistles is fun and exciting, but I wonder if there a complete system that would actually benefit form having this that wouldn't already have a better place to do it? Jason