Force a specific IP for outgoing WG traffic with SNAT?

2023-02-16 Thread Roman Mamedov
Hello, I'm trying to move all my WG communication with peers to a non-primary IP of my server. It has IPs added like this: inet6 2001:db8::ca6c/128 scope global deprecated valid_lft forever preferred_lft 0sec inet6 2001:db8::1/128 scope global nodad valid_lft forever pre

Re: [Patch] [testing][wireguard] Remove unneeded version.h include pointed out by 'make versioncheck'

2023-02-16 Thread Jason A. Donenfeld
No idea if this is something intended for me to apply or if it's an automated email. Fix the formatting, resend, and then maybe I'll apply it?

Re: [Patch] [testing][wireguard] Remove unneeded version.h include pointed out by 'make versioncheck'

2023-02-16 Thread Alexander Lobakin
From: Jesper Juhl Date: Thu, 16 Feb 2023 02:01:05 +0100 (CET) >> From e2fa4955c676960d0809e4afe8273075c94451c9 Mon Sep 17 00:00:00 2001 > From: Jesper Juhl > Date: Mon, 13 Feb 2023 02:58:36 +0100 > Subject: [PATCH 06/12] [testing][wireguard] Remove unneeded version.h > include >  pointed out by

Re: Noise Protocol Question

2023-02-16 Thread Jason A. Donenfeld
On Sat, Feb 11, 2023 at 03:39:12PM +, z wrote: > TL;DR Why is wireguard go not calling isZero() on the output of the ECDH key > agreement every time? Good question. AFAICT, this was something I had noticed back when this code was in development, but then zero checking only got added to the i

Noise Protocol Question

2023-02-16 Thread z
Hi, I was reading over the source code for wireguard-go, and I noticed something in the device/noise-protocol.go file that I didn't understand. There are six invocations of the sharedSecret() function, which performs the X25519 operation on a local private key and a remote public key as part of