Messages

1

Virtual private networks / Re: Wireguard VPN traffic monitoring

« on: June 02, 2023, 03:17:22 pm »

I'm glad it worked out for you. I will be migrating tonight then.

2

Virtual private networks / Re: Wireguard VPN traffic monitoring

« on: June 01, 2023, 11:10:13 pm »

Haven't migrated yet – don't want to be reconfiguring interfaces in the middle of the night in case something goes wrong. I'll do it this weekend. Despite Go being more CPU demanding and reportedly at least 50% less performant, I'm confident it will still fully saturate the 100 Mbit WAN. The WireGuard devs have an IRC channel, which can be found on the official site.

3

Virtual private networks / Re: Wireguard VPN traffic monitoring

« on: June 01, 2023, 09:09:47 pm »

As far as I am aware, netmap is required for bsd to monitor the interfaces. I had the same problem and posted it on reddit yesterday. Basically, the only way to monitor wireguard is by using the Go Lang userspace implementation and not the kmod - netmap doesn't support the kmod version yet, that is why neither NetFlow, nor zenarmor can monitor it. For more info, check r/zenarmor - don't want to post the link here. After receiving their advice I opened this thread here: https://forum.opnsense.org/index.php?topic=34299.0

4

Virtual private networks / Re: Migration of WireGuard configuration from wireguard-kmod to wireguard-go

« on: June 01, 2023, 11:03:17 am »

Ok, got it, thank you.

Uninstalling the kernel module before the installation of wireguard-go will not purge the config files, is this correct ?

5

Virtual private networks / Re: Migration of WireGuard configuration from wireguard-kmod to wireguard-go

« on: June 01, 2023, 10:47:29 am »

Greetings and thank you for the input,

This is the advice I was given from a zenarmor employee:

 

You need to use wireguard-go module. We experienced that if you install wireguard-go without uninstalling the kernel module, it can not be converted as expected. You need to remove wireguard kernel module, then install wireguard-go module.

So if I uninstall kmod first and then install wireguard-go, the config will be transferred automagically ?

6

Virtual private networks / Migration of WireGuard configuration from wireguard-kmod to wireguard-go

« on: June 01, 2023, 10:19:47 am »

Regarding a transition from wireguard-kmod to wireguard-go, I have a WireGuard configuration that was set up entirely using the WebUI. If I uninstall wireguard-kmod and install wireguard-go, will my existing WireGuard configuration automatically migrate to the new implementation? I'm specifically concerned about the migration of my configuration of existing peers. Any guidance or steps to ensure a smooth migration would be appreciated.