Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - khs

#1
I'm glad it worked out for you. I will be migrating tonight then.
#2
Haven't migrated yet – don't want to be reconfiguring interfaces in the middle of the night in case something goes wrong. I'll do it this weekend. Despite Go being more CPU demanding and reportedly at least 50% less performant, I'm confident it will still fully saturate the 100 Mbit WAN. The WireGuard devs have an IRC channel, which can be found on the official site.
#3
As far as I am aware, netmap is required for bsd to monitor the interfaces. I had the same problem and posted it on reddit yesterday. Basically, the only way to monitor wireguard is by using the Go Lang userspace implementation and not the kmod - netmap doesn't support the kmod version yet, that is why neither NetFlow, nor zenarmor can monitor it. For more info, check r/zenarmor - don't want to post the link here. After receiving their advice I opened this thread here: https://forum.opnsense.org/index.php?topic=34299.0
#4
Ok, got it, thank you.

Uninstalling the kernel module before the installation of wireguard-go will not purge the config files, is this correct ?
#5
Greetings and thank you for the input,

This is the advice I was given from a zenarmor employee:

QuoteYou need to use wireguard-go module. We experienced that if you install wireguard-go without uninstalling the kernel module, it can not be converted as expected. You need to remove wireguard kernel module, then install wireguard-go module.

So if I uninstall kmod first and then install wireguard-go, the config will be transferred automagically ?
#6
Regarding a transition from wireguard-kmod to wireguard-go, I have a WireGuard configuration that was set up entirely using the WebUI. If I uninstall wireguard-kmod and install wireguard-go, will my existing WireGuard configuration automatically migrate to the new implementation? I'm specifically concerned about the migration of my configuration of existing peers. Any guidance or steps to ensure a smooth migration would be appreciated.