TruCommand (hosted) and Wireguard requirement question...

[Coreyoli]

Good morning,

I'm looking at signing up for the hosted Trucommand and had a quick question about the wireguard requirement... Once the setup is complete I'm assuming wireguard is required to be running at all times, correct? This would require it to be installed on a server or other device that is available 24x7..?

Am I missing something here?

Thanks,

 

[sretalla]

As I understand it, the wireguard tunnel is set up between the TrueNAS host and the TrueCommand instance directly, no additional server would be involved.

Happy to be corrected by someone who has used that service.

 

[Coreyoli]

As I understand it, the wireguard tunnel is set up between the TrueNAS host and the TrueCommand instance directly, no additional server would be involved.

Happy to be corrected by someone who has used that service.

I'm really hoping that's how it is, I would hate to have to maintain an ongoing wireguard installation, if I didn't have to..

 

[sretalla]

Looks like the document talks about how to connect a client (the device from which you would connect to the admin portal):

Installing TrueCommand Cloud

Describes the steps for installing TrueCommand Cloud.

www.truenas.com

That seems like you need wireguard (client) on that device and it would need to remain connected while you use the portal, not all the time. It means not just anyone can even turn up to the portal login screen, so pretty decent security (as you would want if it's able to manage all your servers).

When connecting a server, it's a certificate-based connection that's established and I think it punches its own tunnel back to the cloud (in line with what you were hoping).