aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* man: update wg-quick(8) to show Debian resolvconf braindamageJason A. Donenfeld2017-05-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | While OpenResolv supports explicit ordering directives such as `-m` and exclusivity directives such as `-x`, Debian's own resolvconf supports none of this, instead using a hard coded list of interface name templates for determining ordering. While trying to emulate `-x` is difficult [*], we can at least try to mostly emulate `-m 0` by masquerading as a `tun*` interface to resolvconf. Ugly, but it works. [*] One heavy handed way of emulating `-x` would be something like: # echo nameserver 8.8.8.8 > /etc/resolv.conf.wg0-exclusive # mount --bind -o ro /etc/resolv.conf.wg0-exclusive /etc/resolv.conf # rm -f /etc/resolv.conf.wg0-exclusive This in practice works quite well, but is a bit heavy to put in a man page. It also doesn't "stack" well. For example, if we simply run `umount /etc/resolv.conf`, how do we know which resolv.conf entry we're unmounting? Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: use src routing for default routes in v6Jason A. Donenfeld2017-05-181-3/+11
| | | | | | | Otherwise, traffic is sent with the IP address of a different interface, and then packets don't actually get delivered. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* man: fix psk mention in wg-quick man pageJason A. Donenfeld2017-05-181-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: opt-in globally to GNU-isms to keep the BSDs happyJason A. Donenfeld2017-05-172-2/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: support text-based ipcJason A. Donenfeld2017-05-178-131/+321
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: check for proto error on set tooJason A. Donenfeld2017-05-171-3/+4
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: stricter key file readingJason A. Donenfeld2017-05-171-31/+40
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* noise: redesign preshared key modeJason A. Donenfeld2017-05-176-49/+52
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: auto MTU discoveryJason A. Donenfeld2017-05-172-1/+28
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: retry name resolution on temporary failureJason A. Donenfeld2017-05-171-1/+10
| | | | | | This should solve many problems at init time. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: no hyphen in preshared, to keep uniformityJason A. Donenfeld2017-04-203-3/+3
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: argc is always 1Jason A. Donenfeld2017-04-191-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: check for malloc failureJason A. Donenfeld2017-04-191-0/+4
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: side channel resistant base64Jason A. Donenfeld2017-04-199-259/+86
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: do not use addrconfig with port in gaiJason A. Donenfeld2017-03-281-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* uapi: add version magicJason A. Donenfeld2017-03-242-8/+27
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: various cleanupsJason A. Donenfeld2017-03-241-5/+6
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: document # comments in wg(8) man pageJason A. Donenfeld2017-03-241-1/+3
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: support old ip(8)Pim van Pelt2017-03-191-4/+8
| | | | | | | Old versions of ip(8) do not accept arguments to `ip rule show.` This patch works around that limitation. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: fix bash completion spacesJason A. Donenfeld2017-02-232-5/+13
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: add wg show [interface] dumpJason A. Donenfeld2017-02-233-5/+51
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: give "off" value for fwmarkJason A. Donenfeld2017-02-234-5/+19
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: allow config files without trailing newlineJason A. Donenfeld2017-02-231-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: unquote fwmark for bash 4.3Jason A. Donenfeld2017-02-141-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: set LC_ALL for consistent regexJason A. Donenfeld2017-02-131-0/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* socket: enable setting of fwmarkJason A. Donenfeld2017-02-137-22/+67
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* socket: general ephemeral ports instead of name-based portsJason A. Donenfeld2017-02-131-3/+3
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: support v6 dual stackJason A. Donenfeld2017-02-131-7/+18
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: remove key for any empty fileJason A. Donenfeld2017-02-072-25/+18
| | | | | | | Rather than just using /dev/null to mean key removal, match on any empty file, so that this interface is cross platform. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: setconf should remove existing pskJason A. Donenfeld2017-02-071-0/+3
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: recommend using resolvconf in exclusive modeJason A. Donenfeld2017-01-191-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: man: recommend correct portJason A. Donenfeld2017-01-152-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: parse IPv6 endpoints correctlyJason A. Donenfeld2017-01-151-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: better removal of suppress_prefix ruleJason A. Donenfeld2017-01-111-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* Update copyrightJason A. Donenfeld2017-01-1018-18/+18
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* uapi: use sockaddr union instead of sockaddr_storageJason A. Donenfeld2017-01-103-17/+17
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* uapi: use flag instead of C bitfield for portabilityJason A. Donenfeld2017-01-101-8/+9
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: ipc: read from socket incrementallyJason A. Donenfeld2017-01-102-43/+49
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: error on short ret readsJason A. Donenfeld2017-01-101-0/+4
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg-quick: enforce good permissionsJason A. Donenfeld2017-01-092-1/+3
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: add installation note for distrosJason A. Donenfeld2017-01-051-0/+5
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: remove DESTDIR for autodetectionChristian Hesse2017-01-051-3/+3
| | | | | | | | DESTDIR is always empty, no need to check anything there. Check the main system instead. Signed-off-by: Christian Hesse <mail@eworm.de> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: add systemd unit and auto-detectionJason A. Donenfeld2017-01-053-11/+66
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: add makefile instructionsJason A. Donenfeld2017-01-052-1/+38
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: add wg-quickJason A. Donenfeld2017-01-055-3/+430
| | | | | | | This is based on wg-config, but is even easier to use, and now makes our full tools suite. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: add bash completion for wg(8)Jason A. Donenfeld2017-01-042-2/+96
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: syscall.h should actually be sys/syscall.hJason A. Donenfeld2016-12-301-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: rename 'bandwidth' to 'transfer' in outputTomasz Torcz2016-12-232-4/+4
| | | | | | | 'bandwidth' is a measure of speed, but wg's output shows only the number of bytes transferred. Thus 'transfer' is a better label. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: do not use AI_ADDRCONFIGJason A. Donenfeld2016-12-231-2/+1
| | | | | | | | | | | Some people run wg(8) using hard coded v6 addresses before interfaces have v6 addresses, causing getaddrinfo to fail. Since AI_ADDRCONFIG doesn't actualy change the sorting, but just the queries made, we don't really need AI_ADDRCONFIG anyway, since we're always only taking the first result. Reported-by: Benedikt Morbach <benedikt.morbach@googlemail.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* wg: allowed-ips is easier to parse with spaces instead of ", "Jason A. Donenfeld2016-12-231-1/+1
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.