WireGuard Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: ST <smntov@gmail.com>
To: WireGuard mailing list <wireguard@lists.zx2c4.com>
Subject: WG: ideas/features
Date: Mon, 26 Mar 2018 20:17:17 +0300	[thread overview]
Message-ID: <1522084637.2044.53.camel@gmail.com> (raw)

Hello,

as I mentioned before I'm learning WireGuard and there are certain
things that I need but didn't find them yet in the docs (either because
I didn't read enough yet or because it's just not there). I'll list them
here and you'll tell whether it is worth for a new feature or not; or
whether I should continue reading...


1. Labels.

Is it possible to add an optional label to a peer to make it a bit more
usable for humans (who tend not to remember IPs or keys). A label
associated with a peer is just a string (could be a first/last name,
email, "NY Office" or whatever). So if you read through the .conf file
or query wg for that label - you can get the right IP to SSH to, if
needed.

In the .conf file it could probably be realized through some sort of
comments before each [Peer] section (didn't check whether # or something
actually work). But querying wg from command line for a label is also
handy...


2. Includes in .conf files.

Is it possible to include .conf files in the main wg0.conf file? Like:

[Interface]
...

Include ./us_peers.conf
Include ./eu_peers.conf

[Peer]
...

This way you can group peers into pools, so there will be a bit more
order/structure...

But what I envision it for is easy maintenance of an N:N mesh of nodes
where each node can communicate with all others. Each node's .conf file
will consist of only 2 things: its own [Interface] with private data and
one Include ./my_complete_mesh.conf with the public data of all [Peer]s.
This single Include file can be put in a central location (or mirrored
to several locations for failover) and all peers will pull it from there
once in a while through a cron job or it can be pushed to them with
rsync/ansible/ssh or whatever.

What do you think?

Thanks.

             reply	other threads:[~2018-03-26 17:05 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2018-03-26 17:17 ST [this message]
2018-03-26 19:06 ` WG: ideas/features Luis Ressel
2018-03-26 19:15 ` wireguard
2018-03-26 19:44   ` ST
2018-04-13 22:31 ` ideas/features Jason A. Donenfeld

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1522084637.2044.53.camel@gmail.com \
    --to=smntov@gmail.com \
    --cc=wireguard@lists.zx2c4.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox