Top all-time · #9575
Jordan Whited
Personal blog · jordanwhited.com/postssystemsprogramming
Jordan Whited's personal blog at jordanwhited.com covers systems and programming. Since 2020, 8 different Hacker News readers have linked it 9 times, most often “WireGuard Endpoint Discovery and NAT Traversal Using DNS-SD”. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link Jordan Whited's posts on WireGuard endpoint discovery and NAT traversal, which explain how peers find each other's public endpoints, often via a DNS-based introduction server.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- WireGuard Endpoint Discovery and NAT Traversal Using DNS-SD7 people · 7 mentions · first linked 2020-05-21
What Hacker News says?
https://github.com/jwhited/wgsd does NAT traversal with Wireguard, but you need to operate a CoreDNS server to do it. More info on how it works: https://www.jordanwhited.com/posts/wireguard-endpoint-discov...
Comment linking /posts/wireguard-endpoint-discovery-nat-traversal/
on “CVE-2022-41924 – tailscaled can be used to remotely execute code on Windows”Submitted CoreBGP – Plugging in to BGP as a story · 126 points
HN discussionSomeone linked a write-up above [1]. It's not simple, but I found it well-written, and doesn't assume too much networking knowledge. I guess it's still a young protocol and we have proofs of concepts but not full-fledged deployment-ready solutions yet... 1: https://www.jordanwhited.com/posts/wireguard-endpoint-discov...
Comment linking /posts/wireguard-endpoint-discovery-nat-traversal
on “WireGuard Bounce Server Setup”Submitted WireGuard Endpoint Discovery and NAT Traversal Using DNS-SD as a story · 19 points
HN discussionThis[1] is the best post I've seen on that _outside_ of the Tailscale writeup linked below. The clever bit is that the introduction server uses wireguard tunnels to find your endpoint information, then shares it out via DNS. Of course it still requires you to be able to run custom code on all of the endpoints, which requires supporting many different platforms. I'm still looking for a FLOSS mesh network built on top…
Comment linking /posts/wireguard-endpoint-discovery-nat-traversal/
on “WireGuard Bounce Server Setup”Submitted WireGuard Endpoint Discovery and Nat Traversal Using DNS-SD as a story · 3 points
HN discussionI guess I'm looking for wireguard's version of STUN. And now that I know what to google for, finally found some promising leads. https://github.com/jwhited/wgsd https://www.jordanwhited.com/posts/wireguard-endpoint-discov... https://github.com/tjjh89017/stunmesh-go
Comment linking /posts/wireguard-endpoint-discovery-nat-traversal/
on “2026 is the Year of Self-hosting”Submitted WireGuard Endpoint Discovery and Nat Traversal Using DNS-SD (2020) as a story · 2 points
HN discussionStarlink's IPv4 is behind CGNAT, and their IPv6 prefixes are not stable. The good news is that it's relatively easy to punch through the NAT. This blog post describes an approach that is working well for me: https://www.jordanwhited.com/posts/wireguard-endpoint-discov...
Comment linking /posts/wireguard-endpoint-discovery-nat-traversal/
on “Choose Your Own IP”