Re: Better Output

[Aaron Jones <me@aaronmdjones.net>]

[-- Attachment #1.1: Type: text/plain, Size: 1152 bytes --]

On 17/04/2022 08:22, Hendrik Friedel wrote:
 > I would suggest an improvement here:
 >
 > 1) If no Server responds on the particular domain/IP,
 >    wireguard should show a message

This would be technically achievable, but note that WireGuard
uses UDP, which has no concept of "connections". See also
below.

 > 2) If a wireguard server responds, but the key is not valid

WireGuard does not respond if the keys are not valid. See
section 5.1 ("Silence is a Virtue") in the WireGuard
whitepaper [1].

 > 3) If the connection fails, the Windows Client should show
 >    a RED symbol under status.

This could only be determined by a previously-in-use session
having had no packets received for greater than the maximum
rekey interval (2 minutes).

However, WireGuard itself will not send any data if it has no
data to send (same section of the whitepaper), and so if you
are not using the tunnel for 2 minutes, this would be
indistinguishable from a failed tunnel.

An exception is if you enable keepalives; they are 0-length
data packets.

[1] https://www.wireguard.com/papers/wireguard.pdf

Regards,
Aaron Jones


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]