Questions tagged [wireguard]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
2 answers
203 views

Can an NGINX reverse proxy reveal the backend if serving non-static content?

My setup consists of a public-facing VPS running NGINX, and a local machine running certain services. The VPS and the local machine are connected using WireGuard, and NGINX on the VPS is using ...
blissful.sizable603's user avatar
1 vote
2 answers
295 views

Can a VPN connection be detected (and get blocked) even after the key exchange happens

If the key exchange happens when using lets say Wireguard or any other protocols that use IKA, and the connection never drops, could the ISP still detect the VPN traffic using Deep Packet Inspection?
Emily1001's user avatar
1 vote
2 answers
1k views

Is WireGuard fixed IP address obtainable by LAN clients if VPN is running on the router? WebRTC/STUN risk?

WireGuard does not assign dynamic IP addresses, which may be a privacy risk. It is known that while WireGuard may offer advantages in terms of performance, by design it is not ideal for privacy, ...
Opayq's user avatar
  • 13
0 votes
1 answer
575 views

Risks posed by a wireguard connection to a compromised server

I am trying to understand the risks posed by having a wireguard connection under a very specific and narrow set of circumstances. I have a desktop at home that is behind a router/firewall and is not ...
gauss's user avatar
  • 3
2 votes
1 answer
1k views

What's the wireguard "key" exactly used for?

In here, it is required to actually share your Wireguard public key to be able to port forward: https://mullvad.net/en/help/port-forwarding-and-mullvad/ So if this key is actually used for encryption, ...
45145818's user avatar
1 vote
2 answers
389 views

Why do site operators block legal VPNs?

I use OpenWrt and by default all outgoing traffic is tunneled through Wireguard VPN endpoint (provider from the list of privacytools.io recommendations). Often I get an "Access Denied" or ...
Sybil's user avatar
  • 1,445
4 votes
2 answers
2k views

Compression and Encryption against security issues

I'm having a hard time knowing whether the following setup is vulnerable to CRIME/BREACH type attacks (which target HTTPS). I am running a Wireguard VPN that tunnels VXLAN protocol, using ChachaPoly20 ...
Orsiris de Jong's user avatar
1 vote
0 answers
192 views

How roaming works with ssh private keys?

This occurred to me when looking at the security model wireguard is using. Instead of relying on users credentials and Radius authenticating central server each user has a private key used to ...
Daniel Krajnik's user avatar
3 votes
1 answer
5k views

Logging into remote server via SSH using VPN (Wireguard). Is it foolproof?

I have a remote server into which I login via ssh. On this server I have setup a Wireguard VPN to which my host connects. The ssh server (ssh daemon) listens on a private IP interface (the server's ...
Kibartas's user avatar
  • 133
0 votes
1 answer
374 views

Mixing VPN Protocols

Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
bakingsoda's user avatar
1 vote
0 answers
2k views

Wireguard is blocked in Iran , what can I do?

Brief description : I think Wireguard is blocked from special datacenters like Hetzner. How can I bypass the government firewall? Is there a way, for example, a plugin or something to mix it with ...
Parsa's user avatar
  • 111
4 votes
1 answer
6k views

WireGuard / CVE-2019-14899: How secure the protocol really is?

I've been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I've been earning a lot of buzz around the simplicity and security of WireGuard. Now I've found some ...
TCB13's user avatar
  • 227
4 votes
1 answer
3k views

Is there a security vulnerability in setting a public DNS entry to a private IP Address?

I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
Will Pike's user avatar
  • 143
0 votes
0 answers
188 views

Undetectable Proxy or VPN Protocol

Is there a safe way for creating a proxy, tunnel, or VPN that cannot be detected by the datacenter or ISPs? I'm living in an oppressing country, but I've access to a VPS with less regulated access to ...
Someone's user avatar
0 votes
0 answers
140 views

Can installed applications bypass vpn and know your real ip?

Adding that the vpn has an hard kill switch enabled that doesn't allow connections other than through it.
James's user avatar
  • 1
0 votes
1 answer
282 views

Securing access to information stored on a home based Nextcloud server acessed via self-signed SSL certificate and home vpn

I am configuring a private cloud at home using nextcloud on a linux machine. It is running an apache webserver over an https connection (let's encrypt self-signed certificate) and a VPN server (...
BMM's user avatar
  • 103
3 votes
1 answer
3k views

Block WireGuard clients' access to specific websites

I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to either block the VPN clients to access specific websites (i.e. block them access https://...
G. Digkas's user avatar
0 votes
1 answer
707 views

Wireguard key exchange

I'm trying to understand whether Wireguard's key re-exchanges are done inside of the existing encrypted tunnel, or if they are done outside of that existing encrypted tunnel.
Wireguard Question's user avatar
-4 votes
1 answer
935 views

Wireguard vs. OpenVPN [closed]

Which is better in what scenario? What cons and pros do they have? (optional question) Which is more secure? (optional question) Best use case of each one? Isn't WireGuard based on OpenVPN?
Sir Muffington's user avatar
1 vote
1 answer
2k views

Wireguard: Is it suitable for road-warrior scenarios?

Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
eternaltyro's user avatar
12 votes
1 answer
9k views

WireGuard VPN: how safe is it for production in its current state?

In our project we had to build a VPN to get through to computers residing behind NAT. I never did it before. While looking for suitable software I came across WireGuard which claimed to be very simple....
user1876484's user avatar