Hacker News Reader

Comment by hamandcheese | Hacker News Reader

WireGuard uses UDP and is effectively "connectionless" meaning there is no persistent connection to be maintained. It also allows for seamless IP address roaming (your peer doesn't care if two messages come from two different IPs so long as they are signed with the right key).

In short, I expect it to have no meaningful degradation when on a bad network (so long as they don't block the traffic or have overly hostile NAT).

View on HN

That is exactly what I was hoping for.

Too bad it'll take forever before iOS can use it, because the current state of VPN on Wi-Fi is terrible (I understand that is not the first thing WireGuard is looking to solve, but it'll be great when it gets there).

The way WireGuard is designed should actually result in a more stable connection for the end user when the device is hopping between LTE and WiFi constantly.

There apps that can run as third party VPN providers on iOS. It's often used by corporate networks that use non-standard VPN protocols.

So there is hope. :-)

ZeoTier, which also uses UDP, has an iOS app. So it is possible if the dev team wants to prioritize it.

I seriously recommend all to try zero-tier. Especially the fine-grained permissions control is fantastic. It is the only one that went so far as fool-proof.

It wasn't a whole lot of fun trying to connect code designed to operate at L2 (ZeroTier) with the L3 tun adapter they give you in iOS and Android. Fortunately that code doesn't have to be touched too often though :)

Is it open source?

Fortunately WireGuard only encapsulates at L3, if I’m not mistaken :)

Reply on news.ycombinator.com