subspace

That is nice to see, I was looking at subspace last week and the last commit to https://github.com/subspacecloud/subspace had led me to believe it had withered and died, I was guessing due to the primary backing company having died? So it is quite nice to see that it is living on as a fork.

WireGuard. Run it on a bastion box. There isn’t a batteries included tool I know that’s good at this. The WireGuard ecosystem means you gotta glue a lot of OSS stuff together. tldr make sure the bastion box can reach the stuff you need it to reach as far as subnets and security groups go, ensure kernel will fwd traffic from WireGuard clients, run WireGuard daemon, and expose it to the outside world via eip. I’m oversimplifying (dns, sec groups, routing client traffic to other subnets) - but hopefully that explains the gist. I have a small Python script that takes a XLSX file as input and populates a dir with config files and QR code images for each user. Or you can check out some of the OSS ways to do self-service vpn mgmt with a web UI that authenticates against Google auth. I haven’t deployed this yet but it looks cool https://github.co

> wireguard is itching for a nice ui or cli tool for managing configs.... if anyone knows one please let me know... I'm been writing wg-access-server[1] which is an open source all-in-one solution for getting a wireguard based VPN server up and running. There are a few others i've come across as well: streisand[2], wg-ui[3], subspace[4] If you like, i'd be happy to hear about your use-cases and see if I can fit them into wg-access-server :D [1] https://github.com/Place1/wg-access-server [2] https://github.com/StreisandEffect/streisand [3] https://github.com/EmbarkStudios/wg-ui [4] https://github.com/subspacecloud/subspace

Start by having a look at subspace https://github.com/subspacecloud/subspace

The original project [1] hasn’t seen any commits in a year. [1] https://github.com/subspacecloud/subspace

There are some attempts like subspace: https://github.com/subspacecloud/subspace but I have not found anything stable yet.

Haven't seen it mentioned here yet, so this might be useful to someone getting into WireGuard: https://github.com/subspacecloud/subspace This is a tool that helps you generate and manage configurations for WireGuard, generate qr code for configuring mobile devices and it even integrates into SAML for authentication. It's not as fancy as some other VPN management tools but this is an easy way to get WireGuard set up without too much messing with configs

Absolutely too much work for a “simple” VPN. I use Subspace (https://github.com/subspacecloud/subspace) on a VM. I am sure it can be setup on a Pi as well.

Check out https://github.com/subspacecloud/subspace

WireGuard is awesome once you have it set up, but I find user management a little fiddly due to the need to generate a key pair and assign an IP address for each client. The last time I set up a WireGuard server, I used this script (with minor modifications) to create the users: https://github.com/adrianmihalko/wg_config But, the next time I set up a WireGuard server, I'll use this web-based admin UI, which displays a QR code to easily configure a mobile client: https://github.com/subspacecloud/subspace

It's hardly point-and-click and this could be off-putting for most people. I am technically savvy and I still break out in a sweat looking at a huge tutorial for nothing more than a lightweight VPN tunnel. A quick Google yields these two GUI options for Wireguard (which I have yet to try, but they look promising, especially Subspace) https://github.com/marcin212/wireguard-gui-windows https://github.com/subspacecloud/subspace