I don't understand why you would want to over-complicate WireGuard like this.
The default setup is perfect - you set up your profiles, and the server doesn't respond if you try to connect with an invalid one. Any other addon to this is just reducing security.
Comments
I don't understand why you would want to over-complicate WireGuard like this.
The default setup is perfect - you set up your profiles, and the server doesn't respond if you try to connect with an invalid one. Any other addon to this is just reducing security.
Why muddy that perfect process with this?
How is this making it more complicated?
The “why” is pretty simple: the WireGuard protocol is really nice and makes a better protection layer than DTLS in my opinion.
All this implementation does that is different is make hosting public services (accessible to unknown peers) possible.