Remix.run Logo
LeoPanthera 9 days ago

Is it possible to identify wireguard traffic that isn't on a common port?

akho 9 days ago | parent [-]

Yes. Fixed packet headers, predictable packet sizes. I don't know what "a common port" means in relation to wg.

ItsHarper 9 days ago | parent | next [-]

51820 is the one they use in the docs, that's probably the most common one.

kube-system 9 days ago | parent | prev [-]

They mean UDP port 51820

akho 9 days ago | parent [-]

Yeah. Tailscale uses 41641, and you can generally use whatever. I don't think there's any consensus, or majority.