On: WireGuard: Next Generation Secure Kernel Network T...

[kijiki]

Namespacing would work, but it might be simpler to use multiple routing tables and "ip rule" to match each app and direct it to the right routing table. You can use iptables to match on the process and set a mark on the packet that "ip rule" will match on.

[nl → kijiki]

Nice..

So:

>Is there anywhere this is written down so I don't have to spent 6 hours trying to work out how to do it?

Edit, I found https://freeaqingme.tweakblogs.net/blog/9340/netflix-using-a... which seems to cover at least some. It is done on a per-user basis though.

[zokier → kijiki]

Shouldn't namespacing be just 'ip netns add wireguard && ip link set dev wg0 netns wireguard && ip netns exec wireguard <myapp>'? Seems simple enough.