Messages

1

Virtual private networks / Re: Slow Kernel-based WireGuard Performance

« on: August 06, 2021, 06:10:17 am »

Thank you for this!  I was able to go back a few generations and try older versions of wireguard-kmod.  Unfortunately, my speed remained slow throughout, so I assume the issue isn't due to wireguard-kmod but some other OPNsense change.

I'll plan on purchasing a support plan, if you think it will be helpful to diagnose this.

Thanks!

Branin

2

Virtual private networks / Re: Slow Kernel-based WireGuard Performance

« on: August 04, 2021, 11:31:56 am »

You're right, of course.  Looking more into it, I built the system in the beginning of May, so 0.0.20210424 (or something similar) is probably the one that worked fast for me.  Any way of installing that version now?

Alternatively, any other ideas why Wireguard (in kernel mode) may have slowed down around Opnsense 21.1.8 or so?

Thanks!

Branin

3

Virtual private networks / Re: Slow Kernel-based WireGuard Performance

« on: August 04, 2021, 09:40:22 am »

Unfortunately, I tried opnsense-revert even when I was still on 21.1 (before upgrading to 21.7) and it didn't work (fetching wireguard-kmod.txz failed).  The current version is 0.0.20210606_1, but the previous version was just 0.0.20210606 and it worked correctly, I believe.

4

Virtual private networks / Re: Slow Kernel-based WireGuard Performance

« on: August 04, 2021, 03:25:27 am »

Any thoughts on how to revert to an earlier version of wireguard-kmod?

Thanks!

5

Virtual private networks / Slow Kernel-based WireGuard Performance

« on: August 02, 2021, 10:56:24 am »

I have 2 OPNsense servers running a WireGuard site-to-site tunnel across a 1Gbps connection.  I've installed wireguard-kmod and previously was able to see approximately 850Mbps or so of iPerf across the connection.   However, I've installed updates over the last couple of weeks and now only see approximately 400Mbps via an iPerf test.  I saw the slowdown with both 21.1 and 21.7.

I'm not sure why wireguard-kmod has become much slower, but I'd like to try reverting the wireguard-kmod package to a previous version.  I'm having trouble figuring out how to do this though.

Any recommendations?

Thank you.