Dealing with large number of IPv4 clients

Dealing with large number of IPv4 clients

[David Weinberger]

[-- Attachment #1.1: Type: text/plain, Size: 558 bytes --]

Dear wireguard team,

We are a VPN service provider trying to offer wireguard to our customers.

Given the large user base, we plan to lease IPs automatically using a custom upper layer service before users can connect, but we can not seems to find a proper opportunity to reclaim those IPs. Once allocated, it seems wireguard assumes the client can use the IP forever, since there is no explicit disconnection.

What's the proper way to deal with large number of IPv4 clients?

(We're aware of the wg-dynamic project, but it seems it's IPv6 only.)

Regards.

[-- Attachment #1.2: Type: text/html, Size: 715 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Dealing with large number of IPv4 clients

[Linus Nordberg]

David Weinberger <cubicalpie@protonmail.com> wrote
Thu, 21 Mar 2019 12:35:05 +0000:

> What's the proper way to deal with large number of IPv4 clients?
>
> (We're aware of the wg-dynamic project, but it seems it's IPv6 only.)

wg-dynamic will support dynamic IP address allocation for both IPv4 and
IPv6.

It will use a link local IPv6 address for communications between client
and server daemons. Maybe this can explain the misconception that it
would be handling IPv6 addresses only?

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Dealing with large number of IPv4 clients

[Matthias Urlichs]

On 21.03.19 13:35, David Weinberger wrote:
> Once allocated, it seems wireguard assumes the client can use the IP
> forever, since there is no explicit disconnection.

Umm, no. A client can only use addresses assigned to it. Thus if you
give the address to another client, packets from the original client
using that source address will be discarded.

-- 
-- Matthias Urlichs

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard