Hello guys,
my question:
Is wireguard -kmod supported in OPNsense 21.1.6 with Sensei
1.9 supported.
With enabled wireguard - (wg0/wg1) interface in Sensei 1.9 there is no filtering of traffic.
Furthermore I noticed that the CPU load stays for a long time at full load up to
up to 90% for a long time and only normalizes when the wireguard interface is removed from Sensei.
Did I miss something? or are the hardworking Sunnyvalley guys still working on this?
a solution?
my setting: *Routed Mode (L3 Mode, Reporting + Blocking) with native netmap driver
Thanks in advance for a hint
Greetings from Germany
Hi,
wireguard-kmod is generally unsupported / experimental at the moment. And, yes, while wiregard-go is based on tun(4) devices packets can be inspected. That is not the case with the kernel module code which is its stripped-down driver counterpart without netmap(4) support.
Cheers,
Franco
@franco
thanks for the info...