http://ciisqbg45nggykdl6rjdrq3wc64csga4vkphu66qsi65mypeitqedoad.onion/blog/port-striping-v3
Instead, we run a script every 20 minutes that, among other things, does: # Remove conntrack entries for WireGuard peers whose last handshake was >= 20 minutes ago current_time=$(date +%s) threshold=$((20 * 60)) # 20 minutes # Loop through each network namespace ip netns | awk '{print $1}' | while read -r ns; do # Get peers in the namespace, skip ones with no handshake ip netns exec "$ns" wg show wg0 dump | awk '{print $1","$4","$5}' | grep -vE ",0$|off" | \ while IFS= read -r line; do # Extract the last...