Questions tagged [wireguard]
The wireguard tag has no usage guidance.
21
questions
1
vote
2
answers
203
views
Can an NGINX reverse proxy reveal the backend if serving non-static content?
My setup consists of a public-facing VPS running NGINX, and a local machine running certain services. The VPS and the local machine are connected using WireGuard, and NGINX on the VPS is using ...
1
vote
2
answers
295
views
Can a VPN connection be detected (and get blocked) even after the key exchange happens
If the key exchange happens when using lets say Wireguard or any other protocols that use IKA, and the connection never drops, could the ISP still detect the VPN traffic using Deep Packet Inspection?
- 11
1
vote
2
answers
1k
views
Is WireGuard fixed IP address obtainable by LAN clients if VPN is running on the router? WebRTC/STUN risk?
WireGuard does not assign dynamic IP addresses, which may be a privacy risk.
It is known that while WireGuard may offer advantages in terms of
performance, by design it is not ideal for privacy, ...
- 13
0
votes
1
answer
575
views
Risks posed by a wireguard connection to a compromised server
I am trying to understand the risks posed by having a wireguard connection under a very specific and narrow set of circumstances.
I have a desktop at home that is behind a router/firewall and is not ...
- 3
2
votes
1
answer
1k
views
What's the wireguard "key" exactly used for?
In here, it is required to actually share your Wireguard public key to be able to port forward:
https://mullvad.net/en/help/port-forwarding-and-mullvad/
So if this key is actually used for encryption, ...
- 21
1
vote
2
answers
389
views
Why do site operators block legal VPNs?
I use OpenWrt and by default all outgoing traffic is tunneled through Wireguard VPN endpoint (provider from the list of privacytools.io recommendations).
Often I get an "Access Denied" or ...
- 1,445
4
votes
2
answers
2k
views
Compression and Encryption against security issues
I'm having a hard time knowing whether the following setup is vulnerable to CRIME/BREACH type attacks (which target HTTPS).
I am running a Wireguard VPN that tunnels VXLAN protocol, using ChachaPoly20 ...
- 143
1
vote
0
answers
192
views
How roaming works with ssh private keys?
This occurred to me when looking at the security model wireguard is using. Instead of relying on users credentials and Radius authenticating central server each user has a private key used to ...
- 111
3
votes
1
answer
5k
views
Logging into remote server via SSH using VPN (Wireguard). Is it foolproof?
I have a remote server into which I login via ssh. On this server I have setup a Wireguard VPN to which my host connects. The ssh server (ssh daemon) listens on a private IP interface (the server's ...
- 133
0
votes
1
answer
374
views
Mixing VPN Protocols
Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
1
vote
0
answers
2k
views
Wireguard is blocked in Iran , what can I do?
Brief description :
I think Wireguard is blocked from special datacenters like Hetzner.
How can I bypass the government firewall?
Is there a way, for example, a plugin or something to mix it with ...
- 111
4
votes
1
answer
6k
views
WireGuard / CVE-2019-14899: How secure the protocol really is?
I've been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I've been earning a lot of buzz around the simplicity and security of WireGuard. Now I've found some ...
- 227
4
votes
1
answer
3k
views
Is there a security vulnerability in setting a public DNS entry to a private IP Address?
I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
- 143
0
votes
0
answers
188
views
Undetectable Proxy or VPN Protocol
Is there a safe way for creating a proxy, tunnel, or VPN that cannot be detected by the datacenter or ISPs?
I'm living in an oppressing country, but I've access to a VPS with less regulated access to ...
- 1
0
votes
0
answers
140
views
Can installed applications bypass vpn and know your real ip?
Adding that the vpn has an hard kill switch enabled that doesn't allow connections other than through it.
- 1
0
votes
1
answer
282
views
Securing access to information stored on a home based Nextcloud server acessed via self-signed SSL certificate and home vpn
I am configuring a private cloud at home using nextcloud on a linux machine. It is running an apache webserver over an https connection (let's encrypt self-signed certificate) and a VPN server (...
- 103
3
votes
1
answer
3k
views
Block WireGuard clients' access to specific websites
I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to
either block the VPN clients to access specific websites (i.e. block them access https://...
- 31
0
votes
1
answer
707
views
Wireguard key exchange
I'm trying to understand whether Wireguard's key re-exchanges are done inside of the existing encrypted tunnel, or if they are done outside of that existing encrypted tunnel.
-4
votes
1
answer
935
views
Wireguard vs. OpenVPN [closed]
Which is better in what scenario?
What cons and pros do they have? (optional question)
Which is more secure? (optional question)
Best use case of each one?
Isn't WireGuard based on OpenVPN?
- 1,552
1
vote
1
answer
2k
views
Wireguard: Is it suitable for road-warrior scenarios?
Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
- 857
12
votes
1
answer
9k
views
WireGuard VPN: how safe is it for production in its current state?
In our project we had to build a VPN to get through to computers residing behind NAT. I never did it before. While looking for suitable software I came across WireGuard which claimed to be very simple....
- 279