Questions tagged [wireguard]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
32 views

How to securely transfer the privatekey and pass it to wireguard in a memory safe manner?

Suppose I have a game server with only the wireguard port open, the client request wireguard configuration from a HTTPS server. And use the obtained configuration in a modified wireguard. The ...
user avatar
0 votes
0 answers
28 views

Comparing Wireguard to IPsec: Is Wireguard working like transport- or tunnel-mode?

I'm deeper into different VPN technologies for university and wondering, how Wireguard is handling the IP-packets (header and payload) compared to IPsec's tunnel and transport mode. May someone ...
user avatar
0 votes
2 answers
206 views

Is WireGuard fixed IP address obtainable by LAN clients if VPN is running on the router? WebRTC/STUN risk?

WireGuard does not assign dynamic IP addresses, which may be a privacy risk. It is known that while WireGuard may offer advantages in terms of performance, by design it is not ideal for privacy, ...
user avatar
  • 3
0 votes
1 answer
177 views

Risks posed by a wireguard connection to a compromised server

I am trying to understand the risks posed by having a wireguard connection under a very specific and narrow set of circumstances. I have a desktop at home that is behind a router/firewall and is not ...
user avatar
  • 3
0 votes
0 answers
127 views

Azure VPN through Wireguard VPN - 'Name Not Resolved'

I have setup a wireguard (WG) vpn server on a raspberry pi that connects to my home internet and I connect to this with my work laptop through a VPN router. On my work laptop, I get access to several ...
user avatar
2 votes
1 answer
325 views

What's the wireguard "key" exactly used for?

In here, it is required to actually share your wireguard public key to be able to port forward: https://mullvad.net/en/help/port-forwarding-and-mullvad/ So if this key is actually used for encryption, ...
user avatar
1 vote
2 answers
255 views

Why do site operators block legal VPNs?

I use OpenWrt and by default all outgoing traffic is tunneled through Wireguard VPN endpoint (provider from the list of privacytools.io recommendations). Often I get an "Access Denied" or ...
user avatar
  • 1,413
4 votes
2 answers
1k views

Compression and Encryption against security issues

I'm having a hard time knowing whether the following setup is vulnerable to CRIME/BREACH type attacks (which target HTTPS). I am running a Wireguard VPN that tunnels VXLAN protocol, using ChachaPoly20 ...
user avatar
1 vote
0 answers
122 views

How roaming works with ssh private keys?

This occurred to me when looking at the security model wireguard is using. Instead of relying on users credentials and Radius authenticating central server each user has a private key used to ...
user avatar
1 vote
1 answer
2k views

Logging into remote server via SSH using VPN (Wireguard). Is it foolproof?

I have a remote server into which I login via ssh. On this server I have setup a Wireguard VPN to which my host connects. The ssh server (ssh daemon) listens on a private IP interface (the server's ...
user avatar
  • 113
0 votes
1 answer
234 views

Mixing VPN Protocols

Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
user avatar
1 vote
0 answers
1k views

Wireguard is blocked in Iran , what can I do?

Brief description : I think Wireguard is blocked from special datacenters like Hetzner. How can I bypass the government firewall? Is there a way, for example, a plugin or something to mix it with ...
user avatar
  • 111
3 votes
1 answer
3k views

WireGuard / CVE-2019-14899: How secure the protocol really is?

I've been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I've been earning a lot of buzz around the simplicity and security of WireGuard. Now I've found some ...
user avatar
  • 217
3 votes
1 answer
2k views

Is there a security vulnerability in setting a public DNS entry to a private IP Address?

I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
user avatar
  • 133
0 votes
0 answers
102 views

Undetectable Proxy or VPN Protocol

Is there a safe way for creating a proxy, tunnel, or VPN that cannot be detected by the datacenter or ISPs? I'm living in an oppressing country, but I've access to a VPS with less regulated access to ...
user avatar
0 votes
0 answers
117 views

Can installed applications bypass vpn and know your real ip?

Adding that the vpn has an hard kill switch enabled that doesn't allow connections other than through it.
user avatar
  • 1
0 votes
1 answer
232 views

Securing access to information stored on a home based Nextcloud server acessed via self-signed SSL certificate and home vpn

I am configuring a private cloud at home using nextcloud on a linux machine. It is running an apache webserver over an https connection (let's encrypt self-signed certificate) and a VPN server (...
user avatar
  • 103
1 vote
1 answer
2k views

Block WireGuard clients' access to specific websites

I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to either block the VPN clients to access specific websites (i.e. block them access https://...
user avatar
0 votes
1 answer
533 views

Wireguard key exchange

I'm trying to understand whether Wireguard's key re-exchanges are done inside of the existing encrypted tunnel, or if they are done outside of that existing encrypted tunnel.
user avatar
-4 votes
1 answer
748 views

Wireguard vs. OpenVPN [closed]

Which is better in what scenario? What cons and pros do they have? (optional question) Which is more secure? (optional question) Best use case of each one? Isn't WireGuard based on OpenVPN?
user avatar
0 votes
0 answers
1k views

Step by step guide for doing Wireguard VPN security and setup properly, for Android phone to OPNSense/pfSense LAN

Truism: Doing security right, is subtle and full of snags for the clueless. Concern: I haven't ever set up a connection between 2 computers using RSA/SSH keys or certificates, in my life. ...
user avatar
  • 1,664
1 vote
1 answer
2k views

Wireguard: Is it suitable for road-warrior scenarios?

Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
user avatar
12 votes
2 answers
9k views

WireGuard VPN: how safe is it for production in its current state?

In our project we had to build a VPN to get through to computers residing behind NAT. I never did it before. While looking for suitable software I came across WireGuard which claimed to be very simple....
user avatar