Networking · Technology in use
WireGuard
An in-kernel VPN with fixed cryptography and a short configuration.
The problem it solves
An in-kernel VPN with fixed cryptography and a short configuration.
Technical rationale
WireGuard fits in a short configuration and lives in the kernel, with no algorithm negotiation or compatibility modes to audit. I use it as the only door into the internal network, which makes the tunnel a critical dependency: its module loads at boot and the node firewall comes up from an enabled service rather than hand-built units nobody remembers.
How I have used it
It is the only way into the homelab’s internal network; administrative interfaces resolve only through the tunnel.