Comment

Comment by d-z-m

> We can install the peer as if we’re the initiator, and flyctl is the responder. The Linux kernel will initiate a WireGuard connection back to flyctl. This works; the protocol doesn’t care a whole lot who’s the server and who’s the client. We get new connections established about as fast as they can possibly be installed.

Is this(effectively) adding a half round-trip to the handshake? i.e.

  1. ->flyctl sends Initiation
  2. <-peer is added via netlink(which causes new Initiation to be sent)
  3. ->Response from flyctl
parent d-z-m 2 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton