Preventing Lateral Movement with WireGuard

procustodibus.com

4 pointskarmarepellent3 comments

Open articleView on HN

Good article.

Is there an easy solution to route everything except the local net through WireGuard?

I find the resulting long list of AllowedIPs a bit cumbersome (and impossible to verify).

https://www.procustodibus.com/blog/2021/03/wireguard-allowed...

Isn't this use case covered in the article that you mentioned? Specifically under the very last heading.

https://www.procustodibus.com/blog/2021/03/wireguard-allowed...

That is you could specify a single Wireguard peer that you send all the traffic to by setting AllowedIPs to 0.0.0.0/0 and also set more specific routes than 0.0.0.0/0 in the main routing table of your device in order to send traffic to certain networks via a different gateway.

Ah. Thanks. Need to try that.

Reply on news.ycombinator.com