Hacker News new | ask | show | jobs
by bb88 244 days ago
TCP over Wireguard is two state machines stacked on each other. QUIC over Wireguard is the same thing. Yet, both seems to work pretty well.

I think I see your argument, in that it's similar to what sshuttle does to eliminate TCP over TCP through ssh. sshuttle doesn't prevent HOL blocking though.
1 comments
geoctl 244 days ago
TCP over WireGuard is unavoidable because that's the whole point of tunneling. But TCP over WireGuard over QUIC just doesn't make any sense, neither from performance nor from security perspective. Not to mention that with every additional tunneling layer you need to reduce the MTU (which is already a very restricted sub-1500 value without tunneling) of all inner tunnels.
link
bb88 243 days ago
> But TCP over WireGuard over QUIC just doesn't make any sense

Agreed, but that wasn't what I was saying. Read it carefully next time before downvoting.

If the argument is if wireguard is a state machine, well, TCP over wireguard is just fine. And that's exactly what I said.

link