Questions tagged [wireguard]
The wireguard tag has no usage guidance.
23
questions
0
votes
0
answers
32
views
How to securely transfer the privatekey and pass it to wireguard in a memory safe manner?
Suppose I have a game server with only the wireguard port open, the client request wireguard configuration from a HTTPS server. And use the obtained configuration in a modified wireguard. The ...
- 101
0
votes
0
answers
28
views
Comparing Wireguard to IPsec: Is Wireguard working like transport- or tunnel-mode?
I'm deeper into different VPN technologies for university and wondering, how Wireguard is handling the IP-packets (header and payload) compared to IPsec's tunnel and transport mode. May someone ...
- 1
0
votes
2
answers
206
views
Is WireGuard fixed IP address obtainable by LAN clients if VPN is running on the router? WebRTC/STUN risk?
WireGuard does not assign dynamic IP addresses, which may be a privacy risk.
It is known that while WireGuard may offer advantages in terms of
performance, by design it is not ideal for privacy, ...
- 3
0
votes
1
answer
177
views
Risks posed by a wireguard connection to a compromised server
I am trying to understand the risks posed by having a wireguard connection under a very specific and narrow set of circumstances.
I have a desktop at home that is behind a router/firewall and is not ...
- 3
0
votes
0
answers
127
views
Azure VPN through Wireguard VPN - 'Name Not Resolved'
I have setup a wireguard (WG) vpn server on a raspberry pi that connects to my home internet and I connect to this with my work laptop through a VPN router.
On my work laptop, I get access to several ...
2
votes
1
answer
325
views
What's the wireguard "key" exactly used for?
In here, it is required to actually share your wireguard public key to be able to port forward:
https://mullvad.net/en/help/port-forwarding-and-mullvad/
So if this key is actually used for encryption, ...
- 21
1
vote
2
answers
255
views
Why do site operators block legal VPNs?
I use OpenWrt and by default all outgoing traffic is tunneled through Wireguard VPN endpoint (provider from the list of privacytools.io recommendations).
Often I get an "Access Denied" or ...
- 1,413
4
votes
2
answers
1k
views
Compression and Encryption against security issues
I'm having a hard time knowing whether the following setup is vulnerable to CRIME/BREACH type attacks (which target HTTPS).
I am running a Wireguard VPN that tunnels VXLAN protocol, using ChachaPoly20 ...
- 143
1
vote
0
answers
122
views
How roaming works with ssh private keys?
This occurred to me when looking at the security model wireguard is using. Instead of relying on users credentials and Radius authenticating central server each user has a private key used to ...
1
vote
1
answer
2k
views
Logging into remote server via SSH using VPN (Wireguard). Is it foolproof?
I have a remote server into which I login via ssh. On this server I have setup a Wireguard VPN to which my host connects. The ssh server (ssh daemon) listens on a private IP interface (the server's ...
- 113
0
votes
1
answer
234
views
Mixing VPN Protocols
Is there any benefit to mixing vpn protocols as far as obfuscating your traffic. Would a multiple hop setup like (openvpn(server1) + wireguard(server2)) be better or is (openvpn(server1) + openvpn(...
1
vote
0
answers
1k
views
Wireguard is blocked in Iran , what can I do?
Brief description :
I think Wireguard is blocked from special datacenters like Hetzner.
How can I bypass the government firewall?
Is there a way, for example, a plugin or something to mix it with ...
- 111
3
votes
1
answer
3k
views
WireGuard / CVE-2019-14899: How secure the protocol really is?
I've been using OpenVPN and SSH tunnels for a multitude of scenarios over the years and recently I've been earning a lot of buzz around the simplicity and security of WireGuard. Now I've found some ...
- 217
3
votes
1
answer
2k
views
Is there a security vulnerability in setting a public DNS entry to a private IP Address?
I recently set up a wireguard server-network configuration with a home server and client devices. I have one main domain that I hope to route everything through via subdomains (in this example, abc....
- 133
0
votes
0
answers
102
views
Undetectable Proxy or VPN Protocol
Is there a safe way for creating a proxy, tunnel, or VPN that cannot be detected by the datacenter or ISPs?
I'm living in an oppressing country, but I've access to a VPS with less regulated access to ...
- 1
0
votes
0
answers
117
views
Can installed applications bypass vpn and know your real ip?
Adding that the vpn has an hard kill switch enabled that doesn't allow connections other than through it.
- 1
0
votes
1
answer
232
views
Securing access to information stored on a home based Nextcloud server acessed via self-signed SSL certificate and home vpn
I am configuring a private cloud at home using nextcloud on a linux machine. It is running an apache webserver over an https connection (let's encrypt self-signed certificate) and a VPN server (...
- 103
1
vote
1
answer
2k
views
Block WireGuard clients' access to specific websites
I have installed a WireGuard VPN server on a Raspberry Pi (running Raspbian) using PiVPN and I would like to
either block the VPN clients to access specific websites (i.e. block them access https://...
- 11
0
votes
1
answer
533
views
Wireguard key exchange
I'm trying to understand whether Wireguard's key re-exchanges are done inside of the existing encrypted tunnel, or if they are done outside of that existing encrypted tunnel.
-4
votes
1
answer
748
views
Wireguard vs. OpenVPN [closed]
Which is better in what scenario?
What cons and pros do they have? (optional question)
Which is more secure? (optional question)
Best use case of each one?
Isn't WireGuard based on OpenVPN?
- 1,316
0
votes
0
answers
1k
views
Step by step guide for doing Wireguard VPN security and setup properly, for Android phone to OPNSense/pfSense LAN
Truism: Doing security right, is subtle and full of snags for the clueless.
Concern: I haven't ever set up a connection between 2 computers using RSA/SSH keys or certificates, in my life. ...
- 1,664
1
vote
1
answer
2k
views
Wireguard: Is it suitable for road-warrior scenarios?
Is Wireguard suitable for road-warrior scenarios where the IP address of the client keeps changing? If anyone tried it out already, I also would like to know if it's really easier to setup than, say, ...
- 807
12
votes
2
answers
9k
views
WireGuard VPN: how safe is it for production in its current state?
In our project we had to build a VPN to get through to computers residing behind NAT. I never did it before. While looking for suitable software I came across WireGuard which claimed to be very simple....
- 279