wag

Thanks! It's been a bit of a labor of love for quite a while, these are the big three but there are a bunch of other little things. Like the time I had to optimise map insertion because the linux kernel does some truly insane locking when you use specific types of eBPF maps: https://github.com/NHAS/wag/issues/84 This is slated to be improved (or has already been improved in kernel 6.8?). But for now wag sort of just side steps it in a horribly stateful way.

I think thats here: https://github.com/NHAS/wag/blob/cdbdbec3393fa86bf6c823117c8...

Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3 to etcd. So please be forgiving if it does some weird things! Hope you all enjoy! P.s Im not a web developer and any tips on that front to make it less teeth pullingly awful are welcome!