WireGuard

“Wireguard is perfectly elegant and maintainable as it is for me, and a wonderful improvement on traditional site to site VPNs.”

“Many times I can connect to that from various public WiFi networks like coffee shops and public libraries.”

“using wireguard is awesome, but I wouldn't say deploying and maintaining it lacks complexity exactly”

“It's also entirely impossible to use by itself when both devices you're trying to connect are behind a NAT or some other restricted network.”

“I cannot tell you how valuable it is to have my own WG instance that lets me create a VLAN for all my devices.”

“The wireguard docs are pretty good, and it's probably worth it at least a little to actually understand what it does.”

“Any security conscious person would probably be using a VPN (Wireguard or Tailscale) to prevent something like this”

“there's no negotiation possible in the protocol; you're basically standing up a 'Wireguard 2.0' that runs separately”

“You lose the formally-verified cryptography guarantees underpinning WireGuard & its implementation, though.”

“having everything not publicly accessible and only accessible over Tailscale or Wireguard makes me slightly happier”

“The default setup is perfect - you set up your profiles, and the server doesn't respond if you try to connect with an invalid one.”

“WG won't respond to any incoming handshake without a valid and authorized client key, it's essentially invisible.”

“I haven't left open ports since a 786k SDSL Linux router PC running CS and Quake servers in 2002. WireGuard these days.”

“If you want a hard-to-use VPN with minimal features and minimal surface area, as you said, Wireguard is right there.”

“If I were to lose the phone, I would simply revoke the Wireguard key and there wouldn't be anything valuable left on it.”

“We live in the age of Wireguard (and Nebula and Tailscale etc). Not being home is not an issue for accessing stuff at home in the slightest”

“has been working somewhat perfectly for years, but there always are a couple of servers that just dont want to play nice”

“I've been having some weird routing issues with WireGuard, that seem to work differently based on the client”

“WireGuard is nice because, unlike most other services, it operates on UDP and sends no reply packet unless you know the key”

“enabling the built-in Wireguard server on my router (which is more or less as simple as setting up Tailscale)”

“I rely more on my NAS at home over a Wireguard tunnel for things I would have used the cloud or a hosting service for before.”

“WG is straightforward to set up, and with LLM the knowledge gap is now nothing if you have trouble with it”

“I found good success with OpenWRT/Tomato and WireGuard. The interface is bad when it comes to provisioning but it can be done with a QR code”

“The only thing I see that would need a bit setup would be the wireguard vpn, but even that is pretty straightforward under FreeBSD”

“It's unfortunate that WireGuard doesn't include a switch that if both sides agree the crypto in use would be AES and SHA256”

“Wireguard exemplifies the superiority of a qualified independent developer over the fractal layers of ossified cruft”

“With the rise of wireguard (and tailscale I suppose), keeping things connected and private has never been easier.”

“simply expose a VPN (Wireguard) port on a public IP. I don't see why you need to involve any third parties in such a setup.”

“it is both convenient and secure. No maintenance or hardening is required, as Wireguard was intentionally designed not to require any tinkering.”

“X11 windows from remote clients can be indistinguishable performance-wise from those of local ones with the latter”

“You can have them assist with configuring and operating wireguard nearly as easily as you can have them walk you through Tailscale, eliminating the need for a middleman.”

“WireGuard's config is conceptually simple: your key, peer's key, endpoint, what IPs route through the tunnel.”

“Wireguard (or similar) limit the protection to a single service with low churn and minimal attack surface.”

“The hardest part with bare wireguard is one part really wants to be static, OR you have to re-init stuff and push DNS updates every time it updates.”

“Wireguard in particular took me a solid half a day to build understanding and get it configured.”

“WireGuard itself is a relatively small project at roughly 4,000 lines of code. It has been thoroughly audited and is even built into the Linux kernel.”

“I kind of wish Wireguard looked more toward the future and had included AES as alternative to ChaCha20”

“And good choice on the wireguard only, only issue I had is devops/testing things and not being connected to the wireguard because I'd be connected to another wireguard”

“Use any PC (even a Raspberry Pi or any cheap "thin client") with Wireguard and you remove Apple and Tailscale from the equation entirely”

“It's wireguard based so there's no "installing a VPN", just an interface/network configured in systemd-networkd”