Project

General

Profile

Feature #11374

WireGuard Status in GUI

Added by Jum Pers 2 months ago. Updated 25 days ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
WireGuard
Target version:
Start date:
02/06/2021
Due date:
% Done:

0%

Estimated time:
Release Notes:
Default

Description

A usability request:

WireGuard in 2.5.0devel is indeed very performant. I have been testing it in pfSense (as 'server') connected to by various 'mobile clients'.

It would be great to be able to get some sense of which clients are 'active' from the dashboard (and a possible status page - something akin to: Status / IPsec / Leases). I realize that WireGuard's approach to connections is different - but just knowing if a connection is in use (or significant use) would be very helpful. Perhaps just knowing if a connection is presently un-'dropped' would be enough.

Not sure what the best visualization approach to that would be for WireGuard. Perhaps a 'last seen' [so many] seconds ago column (with green colorization for some cutoff like: <15s).

Thank you for the superb colorization added to differentiate connected and disconnected clients in the IPSEC mobile dashboard widget (and Lease page) - it is clear, quickly appraisable, and much appreciated.

History

#1 Updated by Jim Pingle 2 months ago

  • Subject changed from WireGuard Connection Tracking in GUI to WireGuard Status in GUI
  • Category changed from Dashboard to WireGuard
  • Target version set to Future

I agree that it would be nice but the WireGuard utility wg does not expose any of that information for us to use. There is no viable way to track any of that currently.

The only information we can get from the utility at the moment is the last known endpoint for a client, but without any kind of time context to make it meaningful.

That may become possible over time as the remaining features in the wg utility are completed on FreeBSD.

For example, most of the commands in wg return an error still:

: wg show latest-handshakes
Unable to access interface: No such file or directory
: wg show transfer
Unable to access interface: No such file or directory
: wg show peers
Unable to access interface: No such file or directory
: wg show dump
Unable to access interface: No such file or directory

#2 Updated by Jum Pers 27 days ago

Thanks - completely understandable - perhaps as more wg features get exposed over time, some way of visually gauging whether a connection is active (more than just receiving keepalive packets) would be great.

#3 Updated by Jim Pingle 27 days ago

Current snapshot builds have a bit more info, but it's still limited in its usefulness since WireGuard is connectionless.

: wg show
interface: wg0
  public key: VBzLM57GLcW0guY2MQF8OZgI2HQKhAWqTE5qeMIANHo=
  private key: (hidden)
  listening port: 51820

peer: v1OAeOdAkIE2Yu8NLalb//nNMn/o8VLCgEqRw55ZMRU=
  endpoint: 198.51.100.15:51820
  allowed ips: 2001:db8:1:ee90::/64, 2001:db8:1:ee91::1/64, 10.15.0.0/24, 10.15.210.1/32
  latest handshake: 48 seconds ago
  transfer: 7.20 MiB received, 3.09 MiB sent

The specific subcommands (e.g. show peers) still do not function.

Also available in: Atom PDF