rene_mobile’s avatarrene_mobile’s Twitter Archive—№ 5,074

        1. Selectively default routing a single address in my home LAN through a @WireGuardVPN tunnel was extremely easy (surprisingly so, considering what I went through previously with IPsec configurations). Just add 0.0.0.0/0 to allowed-ips and use a second routing table. Done in <5 min.
      1. …in reply to @rene_mobile
        Note when using the #OpenWRT support in /etc/config/network: set option route_allowed_ips '0' or otherwise the global default route will point through the tunnel when list allowed_ips '0.0.0.0/0' is set. Works as well, but I wanted it only for a single device this time.
    1. …in reply to @rene_mobile
      I am slowly switching most of my VPN use cases to @WireGuardVPN, and keep being positively surprised by how easy it is to set up even for weird corner cases once used to the basic concepts and commands (which only takes about 1h on first try, so very low bar...).
  1. …in reply to @rene_mobile
    wiki.archlinux.org/index.php/WireGuard is one of the most comprehensive references at the moment, especially in terms of integration with standard Linux desktop components.