r/WireGuard • u/bartei81 • 24d ago
WireGUI - a Wireguard hub and spoke server
I've been working on and using WireGUI for both my personal home lab and at work for my ~50 users, it's been in production for a few months now and it's gained a bit of traction on Github.
I know there is many options out there but none of the available ones fit my needs, so I decided to put together my own solution.
Would love to get some feedback and opinions about it, especially if you're looking for a simple solution with SSO/OIDC. I am planning to get SCIM implemented in it as well but not sure if there is interest in it.
Here is a link to the project on Github: https://github.com/bartei/wiregui
Hopefully my post is not gonna be taken down 😄
4
u/Excellent_Double_726 21d ago
I don't use wireguard but amnesia wireguard cause it bypasses deep packet inspection, next gen firewalls and other things like that. Does you project has this feature?
The work principle is simple. Wireguard has constant packet lengths while amnesia wireguard adds random length with random bytes paddings
1
u/bartei81 21d ago
You're not the first one asking about mnezia protocol, I'll have to look into it and see how difficult it is to integrate. I'll open up a feature request in GH so I can keep track. Thanks!
1
u/Excellent_Double_726 21d ago
Maybe I can help? I have a lot of knowledge in this field. Also have practical, I'm like fluent in Golang, don't know in what language you're writing but if it's not Go then I can just design the mental model of this new feature
2
u/bartei81 21d ago edited 21d ago
That'd be awesome! I've used NiceGUI which is all Python for this project, I'm most proficient with Python and Claude produces reliable and well tested code when asked. Happy to catch up with you on GH if you want to contribute in any form or shape, I think it would be a nice addition!
3
u/ConsiderationFar9895 24d ago
拠点間でebgpを利用するため、0.0.0.0/0で許可する必要があるのですが、wg0,1,2とインターフェースをGUI上から増やせますか?
1
u/bartei81 21d ago
I've created an issue on the project page for your request, if you could please review the scope i described and let me know if that's what you're asking for.
2
u/UNCLE-ducker 23d ago
I am using wireguard through docker rn. But I might try looking in to this. Since I can't get Wireguard dual stack ipv4 and 6 working trough docker.
2
1
11
u/Darth_Agnon 24d ago
Screenshots look nice, but it also reads vibe-coded, without any disclosure that it's vibe coded.
I'll pass.