Show HN: Firezone, an open-source WireGuard-based alternative to OpenVPN AS
I have a singular request - so Wireguard is unusable in any high security environments with <i>compliance requirements</i> - because it doesnt support any 2-factor auth out of the box.<p>We get rejected on stuff like PCI-DSS because the standards mandate a 2-FA. I am not a security expert and wouldnt know about the pros and cons here. But the fact remains that most high-sec compliance needs 2-FA.<p>We have filed tickets on wireguard and it has always got rejected - things like epass2003, fido keys, etc. We have requested the most popular wireguard self-setup - Algo - but also have been rejected.<p>Of all the open source software here, only Pritunl comes somewhat close by layering google auth - <a href="https://docs.pritunl.com/docs/google" rel="nofollow">https://docs.pritunl.com/docs/google</a> . But Pritunl doesnt let u setup google auth as a second factor and its generally tricky to config.<p>If u can have a simple 2-FA - even something as simple as getting a google auth login link while connecting as second factor - that would make the killer feature here. As of right now, Tailscale is the only closed source solution that works.