https://github.com/pirate/wireguard-docs#the-missing-wireguard-documentation
Also published on https://docs.sweeting.me/s/wireguard. It started as just documenting my setup, then I realized I could make it a real resource if I put a few more hours into it.
There are obviously many possible configurations that aren't covered by my main full-example, but it's a good CLI and config reference, and it serves as a place to start learning the basics of what's possible.
I think the biggest selling points for WireGuard are that it's faster and the config is easier. You can find some detailed performance comparisons here: https://www.ckn.io/blog/2017/11/14/wireguard-vpn-typical-setup/
Theoretically WireGuard should offer:
Faster speeds
Better battery life with phones/tablets
Better roaming support (mobile devices)
More reliability
Faster at establishing connections/reconnections (faster handshake)
From https://restoreprivacy.com/wireguard/
If you value simplicity and minimal config surface area, WireGuard is also only 3,800 lines of modern C code with only a dozen or so lines of possible config options and simple symmetric keys, compared to OpenVPN and OpenSSL, which combined have around 600,000 lines and hundreds of lines of possible config. IPSec has around 400,000 total lines with XFRM and StrongSwan together, and anyone who's used it knows how crazy the configs and key management can get for complex setups.
X-Posted here: https://www.reddit.com/r/homelab/comments/bu1n4o/i_wrote_the_missing_documentation_for_wireguard/
No comments:
Post a Comment