WG interface to ipv4

Jordan Glover Golden_Miller83 at protonmail.ch
Mon May 7 10:41:53 CEST 2018


On May 7, 2018 10:24 AM, ѽ҉ᶬḳ℠ <vtol at gmx.net> wrote:

> > SSH is different for two reasons: It runs over TCP, and it runs in
> > 
> > userspace.
> > 
> > Secondly, because SSH runs in userspace, a lot of the processing (such
> > 
> > as the TCP handshake) is done by the kernel on the application's behalf.
> > 
> > So the only way the application has of telling the kernel not to do
> > 
> > this, is by setting the listen address. Wireguard lives directly in the
> > 
> > kernel and so can perform the authentication directly after receiving
> > 
> > the packet, without suffering a context switch to userspace.
> > 
> > -Toke
> 
> Perhaps worth noting this WG app (TunSafe) for WIN  "runs as a user-mode
> 
> application and does not run inside of the kernel"
> 
> https://tunsafe.com/user-guide

That's unfortunate example :)

It's closed source, unaffiliated  and was recommended against several times
here and on IRC. Pointing to go and rust implementations which are being
worked on will be much better.

​Jordan


More information about the WireGuard mailing list