Actions
Correction #15672
closed
Design Considerations - Design Style
Start date:
Due date:
% Done:
100%
Estimated time:
Description
https://docs.netgate.com/pfsense/en/latest/vpn/wireguard/design.html#design-style
Typically, a tunnel is defined with a known peer IP address or hostname for the endpoint, which could take advantage of Dynamic DNS for dynamic peers. This is the most secure method as it locks the tunnel down to specific known peers, but that is not always practical.
This implies that "it locks the tunnel down" which is not the case, see the discussion [[here]] https://forum.netgate.com/topic/189445/wg-peer-endpoint-ip-restrict-peer-to-single-public-ip.
I think this paragraph should me removed entirely.
Updated by
Actions