zx2c4
Joined 15 years ago
Karma
7,652
Submissions
766
Member since
May 22
Recent submissions
Comment · 6 months ago
It's associated per-peer, so it assures a cryptographic mapping between src ip and public key.
Comment · 6 months ago
It's like a routing table on the way out and an ACL on the way in. Maybe an easier way to think of it.
Comment · 6 months ago
I likewise wonder from time to time whether I should replace WireGuard's allowedips.c trie with something better: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...
Comment · 6 months ago
Thank you! I'm glad somebody appreciates it. A lot of thought has gone into the installer and upgrade aspect.
Comment · 6 months ago
Good question! I've never tried. The NT driver makes use of some of the more advanced features of the networking stack, so possibly not. But you never know. I'd love a Wg4React.
Comment · 6 months ago
This was just for WireGuardNT, the kernel driver for the NT kernel that Windows uses.
This project -- https://git.zx2c4.com/wireguard-nt/about/ -- is used by this app -- https://git.zx2c4.com/wireguard-windows/about/ . The former is what the signing situation was about. The latter is just signed using a normal boring (but very expensive!) EV code signing certificate from one of the CAs.
Comment · 6 months ago
As I mentioned in the mailing list post, the Microsoft paperwork shuffling matter got dealt with rather quickly, following all the attention the HN thread from the other day got. And now we're finally out with an update!
NT programming is a lot of fun, though this release was quite challenging, because of all of the toolchain updates. On the plus side, we got to remove pre-Win10 support -- https://lists.zx2c4.com/pipermail/wireguard/2026-March/00954... . But did you know that Microsoft removed support for compiling x86 drivers in their latest driver SDK? So that was interesting to work around. There was also a fun change to the Go runtime included in this release: https://github.com/golang/go/commit/341b5e2c0261cc059b157f1c...
All and all, a fun release, and I'm happy to have the Windows release train cooking again.
[1] https://www.zx2c4.com/ [2] https://www.edgesecurity.com/ [3] https://www.wireguard.com/ [4] https://www.passwordstore.org/ [5] https://git.zx2c4.com/cgit/about/ [6] https://git.kernel.org/pub/scm/linux/kernel/git/zx2c4/linux.git/ [7] https://git.zx2c4.com/