Project

General

Profile

Feature #8786

Wireguard VPN

Added by Stefan Bühler almost 2 years ago. Updated 6 days ago.

Status:
New
Priority:
Very Low
Assignee:
-
Category:
New Package Request
Target version:
-
Start date:
08/15/2018
Due date:
% Done:

0%

Estimated time:

Description

Hi
Please integrate wireguard VPN wireguard.com

Thx

History

#1 Updated by Jim Pingle almost 2 years ago

  • Subject changed from Feautre Request wireguard VPN to Wireguard VPN
  • Priority changed from Normal to Very Low

That won't happen until they make a secure, stable, and audited release. See https://forum.netgate.com/topic/132375/installing-wireguard-vpn/5

#2 Updated by Jim Pingle 12 months ago

  • Category set to New Package Request

#3 Updated by Shannon Barber 11 months ago

They have made a secure and audited release.
We'd prefer to use pfSense but are using OpenWRT for wireguard support.

#4 Updated by Soren Stoutner 8 months ago

For those who might not be following it, WireGuard is going to be integrated into the Linux kernel 5.6 release, which means both that it is at a point where it is considered ready for general consumption and that use of WireGuard is likely to become much more common in the next couple of years.

https://www.zdnet.com/article/at-long-last-wireguard-vpn-is-on-its-way-into-linux/

#5 Updated by Jim Pingle 8 months ago

We are fully aware. It's good news for them, but that does not mean much of anything for its implementation or stability on FreeBSD (yet).

#6 Updated by Ter Ted 8 months ago

Thats sad, I really hope WireGuard could be implemented in pfSense as soon as possible. The performance and security advantage over OpenVPN/Strongswan is huge. Strongswan had a lot of vulnerabilities, the implementation is way to complex. Could the priority of this issue be raised?

#7 Updated by Aaron Shaffer 6 months ago

PLEASE add WireGuard support! Thank you.

#8 Updated by Guy Godfroy 6 months ago

Now that wireguard is officially linux upstream, which is a proof of trust to a certain level, you may want to reconsider your decision. I know Wireguard is still considered WIP, but it takes a lots of trust to be merged in the linux kernel.

#9 Updated by Jim Pingle 6 months ago

See note 5 on this issue: https://redmine.pfsense.org/issues/8786#note-5

Linux is not FreeBSD.

#10 Updated by Lai Wei-Hwa 5 months ago

#11 Updated by Ronald Antony about 2 months ago

Lai Wei-Hwa wrote:

See these links:
https://svnweb.freebsd.org/base?view=revision&revision=357986
https://svnweb.freebsd.org/base?view=revision&revision=357987

FreeBSD is making commits for in-kernel wireguard. It's coming.

Great! Looking forward to this!
WG is pretty much what I needed for years, and badly improvise with IPsec...
...hope this makes into pfSense soon.

#12 Updated by Justin Coffman 6 days ago

wireguard-go exists on FreeBSD. While it may not be in-kernel, it's a userspace implementation from the same project. There's no reason to continue delaying this.

#13 Updated by Jim Pingle 6 days ago

There certainly is reason. We're working on the in-kernel implementation and won't be wasting our time on unstable userspace implementations. It's still progressing well, just not publicly except what can be seen in the code going into FreeBSD directly.

#14 Updated by Soren Stoutner 6 days ago

Take as much time as you need to get it right. I would rather have a stable, in-kernel implementation than a buggy, userspace implementation.

Also available in: Atom PDF