WireGuard Is Two Things

tptacek

This is almost true, but not quite. WireGuard is a protocol, but it's also the Linux kernel implementation of that protocol; there are design decisions in the protocol that specifically support software security goals of the kernel implementation. For instance, it's designed to be possible to implement WireGuard without demand dynamic allocation.

viceconsole

The post mentions the deficiencies of TCP for mobile devices over unreliable links, but I've had nothing but trouble with Wireguard when connecting from phones via mobile data. I suspect it's due to my mobile operator doing traffic shaping / QoS that deprioritizes UDP VPN. In contrast, connecting to OpenVPN over TCP was a huge improvement. Not at all what I expected.