From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.3 required=3.0 tests=DKIM_ADSP_CUSTOM_MED, DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 258CBC7114D for ; Sat, 15 Feb 2020 19:29:09 +0000 (UTC) Received: from krantz.zx2c4.com (krantz.zx2c4.com [192.95.5.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id C362F2082F for ; Sat, 15 Feb 2020 19:29:08 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="VYc0/LMw" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org C362F2082F Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=wireguard-bounces@lists.zx2c4.com Received: from krantz.zx2c4.com (localhost [IPv6:::1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 4566c0cb; Sat, 15 Feb 2020 19:26:04 +0000 (UTC) Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 4975328e for ; Sat, 15 Feb 2020 00:11:16 +0000 (UTC) Received: from mail-pl1-x630.google.com (mail-pl1-x630.google.com [IPv6:2607:f8b0:4864:20::630]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 97af4ca2 for ; Sat, 15 Feb 2020 00:11:16 +0000 (UTC) Received: by mail-pl1-x630.google.com with SMTP id g6so4316298plt.2 for ; Fri, 14 Feb 2020 16:13:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:reply-to:from:date:message-id :subject:to:cc; bh=6X5XEncHjBMhgxUlfkKvzhEbuMF2OWGj8AOQrX6BX3U=; b=VYc0/LMwdxHtCbPAH2UzqbQxG2orkF+W7L1CsDwzC5grzfD4P8ydp9br3aphaauwpa 2luaqtE6WMDwKr9KlGL7zTkOgGOimMuouP2NdKNhYkMRjpgGfWB2JOTLI8a0Ns2JrJiM cpszFwPXYV9d2iIK9KcKNMwZ4gzWP3dSIRbv6LMvB/h9jJTzcI/Tjhw4wxWo/2lngI1Y wuf5RZ/3qIk3yD++XBdV9trRW47jQ4cXhjL7zZQCIT33mRn4z8Y2hZt7zPHx50bnNBS6 wnCD0IR+Ma+MNyisSbUohtr/SNkNYJau88rebUQy12qX2aU7k9n2slXl7yHCvBFo3ml5 nu1A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:reply-to :from:date:message-id:subject:to:cc; bh=6X5XEncHjBMhgxUlfkKvzhEbuMF2OWGj8AOQrX6BX3U=; b=AMkFZ4qFi7o5gv/sV6aBy+kuIYf4rZcMeO21HzJPGYIoZcHhgUZbyeYpxUzxAmnb1a WIgao8DrngWlCPOJbiL94Ys6t8mo/+PS9BqcHNOWWexixD3xa5cJUBaf484IAM7F0OL7 J4h4nkXI+Wn76cZxRErwEBXRCgPTch7hDBMPS3rY/R4kEWdJOpTxFEwo7g1AUdBPyf4s BU1rUZl5PpQCbPvJ0ZjBCF26YCmrCvu73U7+LZ3Dxxd1J6VSDcez5GcphSgGTIJDgRsj lkor25QxQAYaH2sw5mTMoEJi8NwmcWRHAd4jD2mCAZvXDbpeHO5EhjTkSJ12yK3KXxmm iDhg== X-Gm-Message-State: APjAAAVDfL/Eus5w+/K37vihXYkCBwZgIxOuntUmCUinv9Y8Ze6hYeN4 BamvONLLFzj787MYrhvoPcGcqzeGA/FhehDoEwY= X-Google-Smtp-Source: APXvYqxS9vD8Sn/ok7TSK5eZb3DYsMQvqzZn9tBkcXRlv/QglfaJ5fcAWpxAgX/Qj0HKxXjcuoKH9pLRlchDBdrpTCA= X-Received: by 2002:a17:90a:20aa:: with SMTP id f39mr6708445pjg.35.1581725605161; Fri, 14 Feb 2020 16:13:25 -0800 (PST) MIME-Version: 1.0 References: <1FB426DC-C314-4DBE-BEF9-2A35D49094C4@pallas.us> In-Reply-To: <1FB426DC-C314-4DBE-BEF9-2A35D49094C4@pallas.us> From: Mo Balaa Date: Fri, 14 Feb 2020 18:13:14 -0600 Message-ID: Subject: Re: CryptoKey Routing Management for Peers To: Derrick Lyndon Pallas X-Mailman-Approved-At: Sat, 15 Feb 2020 20:26:03 +0100 Cc: WireGuard mailing list X-BeenThere: wireguard@lists.zx2c4.com X-Mailman-Version: 2.1.15 Precedence: list Reply-To: buddybalaa@gmail.com List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============2786907140360992571==" Errors-To: wireguard-bounces@lists.zx2c4.com Sender: "WireGuard" --===============2786907140360992571== Content-Type: multipart/alternative; boundary="000000000000d3f19c059e92305f" --000000000000d3f19c059e92305f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable My company will be open sourcing a configuration management system we=E2=80= =99ve called wg-easy. It is designed specifically for managing large scale distributed WireGuard networks. We are happy to see other are interested in operating WireGuard at scale. Coming very soon, TM. On Fri, Feb 14, 2020 at 17:46 Derrick Lyndon Pallas wrote: > You might also want to check out https://pypi.org/project/wgnlpy/ which > is a Wireguard configuration library for python. > > ~Derrick =E2=80=A2 iPhone > > On Feb 14, 2020, at 3:02 AM, Barrett Strausser > wrote: > > =EF=BB=BF > > I don't doubt that it can handle 1M peers. > > My question was more concerned with can an *Organization *perform the > configuration management to handle 1M peers if all configuration is throu= gh > a static IP. > > If I have 1M peers and .9999 have no change per day, that still leaves 10= 0 > changes or ~4 per hour. I'd argue it is a good practice to have to restar= t > services to pick up those changes. > > I'll have a look at those links. Thank you very much > > -b > > > > On Sat, Feb 8, 2020 at 4:29 PM Jason A. Donenfeld wrote= : > >> WireGuard has an API, via Netlink. This might help you: >> >> https://git.zx2c4.com/wireguard-tools/tree/contrib/embeddable-wg-library >> https://git.zx2c4.com/wireguard-tools/tree/src/uapi/linux/wireguard.h >> >> It can handle 1M peers, yes. >> > _______________________________________________ > WireGuard mailing list > WireGuard@lists.zx2c4.com > https://lists.zx2c4.com/mailman/listinfo/wireguard > > _______________________________________________ > WireGuard mailing list > WireGuard@lists.zx2c4.com > https://lists.zx2c4.com/mailman/listinfo/wireguard > --000000000000d3f19c059e92305f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
My company will be open sourcing a configuration man= agement system we=E2=80=99ve called wg-easy. It is designed specifically fo= r managing large scale distributed WireGuard networks. We are happy to see = other are interested in operating WireGuard at scale.=C2=A0

Coming very soon, TM.=C2=A0

On Fri, Feb 14, 2020 at 17:46 Derrick Lyndon Pallas <derrick@pallas.us> wrote:
You might also want to check out=C2=A0https://pypi.org/project/wgn= lpy/=C2=A0which is a Wireguard configuration library for python.
~Derrick=C2=A0=E2=80=A2 iPhone

=
On Feb 14, 2020, at 3:02 AM, Barrett Strausser &l= t;barrett@bossan= ova.com> wrote:

=
=EF=BB=BF
I don't doubt tha= t it can handle 1M peers.=C2=A0

My question was more con= cerned with can an Organization perform the configuration management= to handle 1M peers if all configuration is through a static IP.
=
If I have 1M peers and .9999 have no change per day, that st= ill leaves 100 changes or ~4 per hour. I'd argue it is a good practice = to have to restart services to pick up those changes.

<= div>I'll have a look at those links. Thank you very much

=
-b



On Sat, Feb 8, 2020 at 4:2= 9 PM Jason A. Donenfeld <Jason@zx2c4.com> wrote:
WireGuard ha= s an API, via Netlink. This might help you:

https://git.zx2c4.com/wiregu= ard-tools/tree/contrib/embeddable-wg-library
https://git.zx2c4.com/wireguard= -tools/tree/src/uapi/linux/wireguard.h

It can handle 1M peers, yes.
_______________________________________________
WireG= uard mailing list
WireGuard@lists.zx2c4.com
h= ttps://lists.zx2c4.com/mailman/listinfo/wireguard
_______________________________________________
WireGuard mailing list
WireGuard@li= sts.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard=
--000000000000d3f19c059e92305f-- --===============2786907140360992571== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ WireGuard mailing list WireGuard@lists.zx2c4.com https://lists.zx2c4.com/mailman/listinfo/wireguard --===============2786907140360992571==--