lkml.org 
[lkml]   [2016]   [Jul]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [RFC] WireGuard: next generation secure network tunnel
From
Date
Hey Bruno,

Sorry I didn't reply to this earlier; the message didn't make it to me
somehow.

Bruno Wolff III <bruno@wolff.to> writes:
> I tried this out on 4.7 kernels and it seemed to work OK. I can't tell
> about security, but the packets made it to where they are going.

Happy to hear!

>
> My eventual use case, is to be able to reach a machine behind NAT by
going
> though a fixed machine in another location. The machine behind NAT will
> keep a tunnel usable by occasionally pinging through the tunnel to make
> sure that NAT has state information allowing packets to make it back and
> that the fixed machine knows where to send packets.

That seems like a setup that would work fine.

>
> This seems much easier to use than ipsec and should be faster than
> tunnelling over ssh or openvpn.

Absolutely! That's the goal.

Thanks for the feedback,
Jason

\
 
 \ /
  Last update: 2016-07-02 01:41    [W:0.071 / U:7.188 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site