Articles / Papers

[steveoni]

Source articles and papers to understand wireguard

Add lists of articles/papers as a comment

[goodyduru]

Wireguard Protocol (Simple)
Whitepaper

[steveoni]

https://mikkel.hoegh.org/2019/11/01/home-vpn-server-wireguard/

https://bash-prompt.net/guides/wireguard-setup/

[goodyduru]

Entire content of Linux Journey(Networking Nomad section) really provides a very good background.

[steveoni]

Entire content of Linux Journey Networking Nomad section really provides a very good background.

This looks really good

[goodyduru]

Thanks, pay special attention to the Routing section when you get there.

[goodyduru]

It turns out that wireguard is a tun device. I've been reading up on them. They are cool. These are some of them:

https://www.kernel.org/doc/Documentation/networking/tuntap.txt
https://backreference.org/2010/03/26/tuntap-interface-tutorial/
https://jvns.ca/blog/2022/09/06/send-network-packets-python-tun-tap/
https://www.gabriel.urdhr.fr/2021/05/08/tuntap/
https://blog.cloudflare.com/virtual-networking-101-understanding-tap
https://tailscale.com/blog/more-throughput

I'm not done reading them though, will do that. I think they do provide a good foundation to understanding how wireguard works.

[randomstuff]

@goodyduru, Note that Kernel-mode implementation of Wireguard is not TUN-based.

See the Quickstart:

Other implementations (for example BoringTun) might be.

[goodyduru]

@randomstuff, I agree. User-mode implementations tend to be TUN-based. Wireguard-go and Wireguard-rs are TUN-based. Thanks for the clarification.

[goodyduru]

This site helps with setting up wireguard with tunneling.

[steveoni]

scapy can be use to manipulate and analyse the packet and frame received from tuntap interface

[goodyduru]

This repo helped me understand tunnelling better from a programming standpoint.

[goodyduru]

Saw this after we had completed the project. Would have really been helpful then. Could still be helpful later.