Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
weiiwang01 committed Oct 1, 2023
1 parent a16d3eb commit bca3567
Showing 1 changed file with 11 additions and 8 deletions.
19 changes: 11 additions & 8 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,14 +15,17 @@ Commonly, there are three approaches for WireGuard NAT traversal relay. The
first is using a traditional NAT traversal relay, like `TURN` or `DERP`
protocol. However, the downside to this method is that it requires you to
install a `TURN` or `DERP` client on your WireGuard peers, which might be
impossible or undesirable for some. The second solution is hub-and-spoke style
IP forwarding, where the cloud server is also a WireGuard peer. In this setup,
packets are decrypted and forwarded on the cloud, which, unfortunately, exposes
unencrypted data in the cloud server. The third solution is tunneling, wherein a
tunnel is established between the WireGuard peer and the cloud server to
transmit encrypted WireGuard packets. The caveat here is that, like all tunnels,
there are MTU overheads. And you have to be cautious about the isolation between
the tunnel network and the WireGuard network.
impossible or undesirable for some.

The second solution is hub-and-spoke style IP forwarding, where the cloud server
is also a WireGuard peer. In this setup, packets are decrypted and forwarded on
the cloud, which, unfortunately, exposes unencrypted data in the cloud server.

The third solution is tunneling, wherein a tunnel is established between the
WireGuard peer and the cloud server to transmit encrypted WireGuard packets. The
caveat here is that, like all tunnels, there are MTU overheads. And you have to
be cautious about the isolation between the tunnel network and the WireGuard
network.

`wpex` is engineered to overcome all these issues. It doesn't require any
software or agent installation on the WireGuard peer side, making it compatible
Expand Down

0 comments on commit bca3567

Please sign in to comment.