mirror of
https://github.com/pirate/wireguard-docs.git
synced 2024-08-16 20:20:50 +03:00
add note about sharing private keys
This commit is contained in:
parent
779080fdaf
commit
cb44fb16d7
@ -372,6 +372,11 @@ You can also read in keys from a file or via command if you don't want to hardco
|
||||
...
|
||||
PostUp = wg set %i private-key /etc/wireguard/wg0.key <(cat /some/path/%i/privkey)
|
||||
```
|
||||
|
||||
Technically, multiple servers can share the same private key as long as clients arent connected to two servers with the same key simulatenously.
|
||||
An example of a scenario where this is a reasonable setup is if you're using round-robin DNS to load-balance connections between two servers that are pretending to be a single server.
|
||||
Most of the time however, every peer should have its own pubic/private keypair so that peers can't read eachothers traffic and can be individually revoked.
|
||||
|
||||
---
|
||||
|
||||
## Usage
|
||||
|
Loading…
Reference in New Issue
Block a user