Identity management for WireGuard
Things I wish WireGuard supported out of the box:- Logging of peer IPs when they initially connect or change (yes, you can do this with module flags, but it should come out of the box).- Tieing WireGuard private keys to a source IP.  As far as I know the endpoint flag does not enforce an IP, a peer can use a different one and still connect.- More control over DNS resolution for endpoints.  I want WireGuard to periodically refresh the endpoint IP when I change networks, for instance.