WireGuard Archive on lore.kernel.org
 help / color / Atom feed
From: Derrick Lyndon Pallas <derrick@pallas.us>
To: Barrett Strausser <barrett@bossanova.com>
Cc: WireGuard mailing list <wireguard@lists.zx2c4.com>
Subject: Re: CryptoKey Routing Management for Peers
Date: Fri, 14 Feb 2020 15:40:33 -0800
Message-ID: <1FB426DC-C314-4DBE-BEF9-2A35D49094C4@pallas.us> (raw)
In-Reply-To: <CA+w0pKY0KGCBAPYqoTReXdDmB22ctWkczEoK-FFxoR3B8b0wzw@mail.gmail.com>

[-- Attachment #1.1: Type: text/plain, Size: 1217 bytes --]

You might also want to check out https://pypi.org/project/wgnlpy/ which is a Wireguard configuration library for python.

~Derrick • iPhone

> On Feb 14, 2020, at 3:02 AM, Barrett Strausser <barrett@bossanova.com> wrote:
> 
> 
> I don't doubt that it can handle 1M peers. 
> 
> My question was more concerned with can an Organization perform the configuration management to handle 1M peers if all configuration is through a static IP.
> 
> If I have 1M peers and .9999 have no change per day, that still leaves 100 changes or ~4 per hour. I'd argue it is a good practice to have to restart services to pick up those changes.
> 
> I'll have a look at those links. Thank you very much
> 
> -b
> 
> 
> 
>> On Sat, Feb 8, 2020 at 4:29 PM Jason A. Donenfeld <Jason@zx2c4.com> wrote:
>> WireGuard has an API, via Netlink. This might help you:
>> 
>> https://git.zx2c4.com/wireguard-tools/tree/contrib/embeddable-wg-library
>> https://git.zx2c4.com/wireguard-tools/tree/src/uapi/linux/wireguard.h
>> 
>> It can handle 1M peers, yes.
> _______________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard

[-- Attachment #1.2: Type: text/html, Size: 2206 bytes --]

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">You might also want to check out&nbsp;<a href="https://pypi.org/project/wgnlpy/">https://pypi.org/project/wgnlpy/</a>&nbsp;which is a Wireguard configuration library for python.<br><br><div dir="ltr">~Derrick&nbsp;• iPhone</div><div dir="ltr"><br><blockquote type="cite">On Feb 14, 2020, at 3:02 AM, Barrett Strausser &lt;barrett@bossanova.com&gt; wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr">I don't doubt that it can handle 1M peers.&nbsp;<div><br></div><div>My question was more concerned with can an <i>Organization </i>perform the configuration management to handle 1M peers if all configuration is through a static IP.</div><div><br></div><div>If I have 1M peers and .9999 have no change per day, that still leaves 100 changes or ~4 per hour. I'd argue it is a good practice to have to restart services to pick up those changes.</div><div><br></div><div>I'll have a look at those links. Thank you very much</div><div><br></div><div>-b</div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Feb 8, 2020 at 4:29 PM Jason A. Donenfeld &lt;<a href="mailto:Jason@zx2c4.com">Jason@zx2c4.com</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">WireGuard has an API, via Netlink. This might help you:<br>
<br>
<a href="https://git.zx2c4.com/wireguard-tools/tree/contrib/embeddable-wg-library" rel="noreferrer" target="_blank">https://git.zx2c4.com/wireguard-tools/tree/contrib/embeddable-wg-library</a><br>
<a href="https://git.zx2c4.com/wireguard-tools/tree/src/uapi/linux/wireguard.h" rel="noreferrer" target="_blank">https://git.zx2c4.com/wireguard-tools/tree/src/uapi/linux/wireguard.h</a><br>
<br>
It can handle 1M peers, yes.<br>
</blockquote></div>
<span>_______________________________________________</span><br><span>WireGuard mailing list</span><br><span>WireGuard@lists.zx2c4.com</span><br><span>https://lists.zx2c4.com/mailman/listinfo/wireguard</span><br></div></blockquote></body></html>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

  reply index

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-02-07 16:23 Barrett Strausser
2020-02-08 21:29 ` Jason A. Donenfeld
2020-02-10 14:07   ` Barrett Strausser
2020-02-14 23:40     ` Derrick Lyndon Pallas [this message]
2020-02-15  0:13       ` Mo Balaa

Reply instructions:

You may reply publically to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1FB426DC-C314-4DBE-BEF9-2A35D49094C4@pallas.us \
    --to=derrick@pallas.us \
    --cc=barrett@bossanova.com \
    --cc=wireguard@lists.zx2c4.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

WireGuard Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/wireguard/0 wireguard/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 wireguard wireguard/ https://lore.kernel.org/wireguard \
		wireguard@lists.zx2c4.com
	public-inbox-index wireguard

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/com.zx2c4.lists.wireguard


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git