wg-dynamic

There's a chicken-egg-like problem involved with that based on the cryptokey routing that wireguard does. The, a bit unfortunately named, 'allowed-ips' parameter determines to which peer wg routes a packet. If you imagine three peers connected to your one central vpn server then for this to work you have to have an allowed-ips parameter set to the same /64 network for each of them from the point of view of the server, which creates a conflict. There is a project to configure allowed-ips dynamically but it's not active any more unfortunately https://github.com/WireGuard/wg-dynamic/blob/master/docs/ide...

Does anyone know the latest on having WG support dynamically assigned IP for peers? There have been some work done[1], but it seems to have stalled for quite some time. 1. https://github.com/WireGuard/wg-dynamic

WireGuard is very hard to manage with a pool of connected devices, especially if you don't know how many will connect ahead of time, it really needs Dynamic IPs, Routes & DNS to compete against OpenVPN. You should be able to add in hostname & credentials on the client end and let it do its magic. I also feel like the language used in wg-dynamic is very dismissive and counter productive: > WireGuard currently uses static addresses everywhere. This is because that is mostly a better way to design your network. But in some cases, insane people want dynamic IP addresses or other dynamic configuration. https://github.com/WireGuard/wg-dynamic/blob/master/docs/ide... So now I'm insane for not wanting to configure every connected client?

For WireGuard there's the official https://github.com/WireGuard/wg-dynamic, or also this: https://github.com/costela/wesher. Or generally for mesh networks as others mentioned: Slack's Nebula, ZeroTier (wait for v2) or Tailscale.

I used to do the same thing, but adding one node meant I had to reprovision all other nodes so each had an updated config file written and reloaded. I decided I want something akin to DHCP, which seems to be worked on here: https://github.com/WireGuard/wg-dynamic It's still WIP though.

Do you know if WireGuard supports DHCP yet? I can only find wg-dynamic[0] but it doesn't look like it's functional. [0] https://github.com/WireGuard/wg-dynamic/blob/master/docs/ide...