WireGuard on OpenBSD

https://blog.jasper.la/wireguard-on-openbsd.html

by fcambus • 7 years ago

119 28 7 years ago

blog.jasper.la

jedberg2• 7 years ago

This is great! I love seeing Wireguard spread. I just spent three weeks traveling abroad and installed wireguard on my home server right before I left. It saved me a lot of trouble when I need to get work done "in the US", but even moreso, it was great so that my kids could continue to watch PBS while we traveled, and it was so easy to use on iOs that everyone in the family could make it work for them.

hanklazard• 7 years ago

Yeah, I seriously appreciate WG. Allows me to keep all home automation local / non-cloud while still giving me the option of easily controlling and checking elements remotely.

groovybits• 7 years ago

Genuine question: In terms of getting from Network A to Network B, is there anything that Wireguard does special that OpenVPN cannot/does not?

vxNsr• 7 years ago

Looks like it's also now available for windows: https://hn.algolia.com/?query=https:%2F%2Flists.zx2c4.com%2F...

super exciting. can't wait to see where it goes from here.

freedomben• 7 years ago

I'm definitely happy to see Windows getting closer, but I do think it's important to state up front that this is "pre-alpha" currently. Depending on you use case, that is super important.

WindowsFon4life• 7 years ago

Will the kernel portion depend on lkm?

brynet• 7 years ago

OpenBSD no longer has lkm, or any loadable kernel module framework. Any kernel implementation would have to be part of the kernel source tree (this one is userland, in ports).

vbezhenar• 7 years ago

I thought wireguard is kernel-mode software and I disliked it because of that. Interesting, may be there's Linux version of user-mode wireguard. I wonder what's the performance difference between usermode and kernelmode wireguard.

JoachimS• 7 years ago

The final part of the article mentions this "What is particularly neat is that WireGuard on iOS supports Always-on."

I can only agree. I have WG installed on my iPhone, iPad and use the WG service provided by Mullvad VPN. And it is on all the time since a few months back. I don't experience any connectivity issues, lack of performance or degradation in battery/power consumption. It really just works. Huge thanks to Jason for developing WG as protocol, server implementation and clients.

brunoqc• 7 years ago

If I have a Wireguard server at home, can I use it on my phone in "always-on" mode? Would it cause problem when I connect to my home's wifi?

It's been a while but I tried to do that with ipsec or something like that in the past and I think it was causing problems. With the routing maybe.

slim• 7 years ago

you need a fixed routable ip address for your home

josteink• 7 years ago

Is static IP really required? A DynDNS domain won’t do?

themattress• 7 years ago

I use afraid.org dynamic dns offering and it works great.

ripa• 7 years ago

You can also run in on-demand mode and exclude your home WiFi, which is what I do. Then you'll be connected to the VPN at all times except when you're on the home WiFi.

Lownin• 7 years ago

Does this mean we're close to WireGuard being viable as a pfSense package?

loeg2• 7 years ago

It's unrelated. pfSense is a FreeBSD derivative; not OpenBSD. FreeBSD already has wireguard-go in ports, but the userspace implementation may not be suitably performant for the kinds of embedded devices pfSense targets.

loeg2• 7 years ago

FWIW, there is a NetBSD kernel implementation work in progress that might be useful (at least as a starting place) for OpenBSD:

https://github.com/ozaki-r/netbsd-src/tree/wireguard

No activity since March, though.

WireGuard on OpenBSD

Related Stories