Hacker News Reader

I'm looking forward to the days when we have good user management for Wireguard. It's so hard to scale it across just my family right now.

View on HN

Algo (mentioned above) will generate a bunch of profiles for you (including QR codes to configure mobile devices without needing to type awkward strings), which works pretty well for me - at least with a family you won't need to add or revoke identities very often I'd hope...

My family shuns a member every other week. If you can't access the family VPN anymore, that is your notice.

I'm using Algo right now and it's perfect if I plan to maintain the same server consistently. The problem is that we're constantly traveling around and latency suffers when trying to connect to a box in DO's NYC3 from Vietnam.

It's a huge hassle to take that box down, spin up a new instance in Singapore, distribute profiles and authenticate. This is neither Algo nor Wireguard's fault. I just wish we had some more tooling to make it easier to move between instances.

Like a good Unix tool, that's outside of WG's scope. User management is done with the likes of LDAP and such.

I completely agree that it should never be part of Wireguard itself. Mostly looking forward to the project and tooling ecosystem that develops around it.

Reply on news.ycombinator.com