EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 14·5 min read
Open WireGuard Endpoints
TL;DR
Open WireGuard endpoints now allow connections from any client without pre-registration, enhancing accessibility for public services. Additionally, asynchronous Lambda invocation enables long-running workflows without holding connections open.
✦ Why It Matters
Implement Open WireGuard endpoints today to streamline client connections and enhance service scalability.
Key Takeaways
- Enable AllowUnknownPeers for open client connections.
- Use UnknownPeerPreSharedKey for added security.
- Implement UseAsyncInvoke for long-running workflows.
- Leverage AWS Secrets Manager for secure PSK distribution.
How It Works
The AllowUnknownPeers property allows WireGuard Listeners to accept connections from any client, removing the need for pre-registered public keys. This is akin to HTTPS, where the server does not need to know the client beforehand.
The UseAsyncInvoke feature changes Lambda invocation to an event-driven model, allowing the Gateway to send packets and move on without waiting for a response, thus enabling durable workflows.