Support AmneziaWG

[Lucid1010]

https://docs.amnezia.org/documentation/amnezia-wg/


This is even better than regular Wireguard. I'm really looking forward to its support!

[Monviech (Cedrik)]

Well, it was added and then quickly removed from freebsd:

https://www.freshports.org/net/amneziawg-tools/

https://reviews.freebsd.org/D51265

Not a good start.

[Arien]

Well, they removed it just to rename the whole thing without "wg" in the name.
Port is available:

https://www.freshports.org/net/amnezia-tools/
https://www.freshports.org/net/amnezia-kmod/

Can it be supported in OPNsense?

[Monviech (Cedrik)]

What should be the scope of "supported in OPNsense"?

As soon as a port exists, you are free to pull the port (e.g. from github) and build the binary via "make build".

Do you mean like offering a prebuilt binary via the package manager? Or even a plugin?

The last two things need somebody who makes an effort.

[haemm0r]

What about: https://github.com/antspopov/opnsense_amnezia_plugin (I am not afflifiated with this repo) ? Does it look complete?

[Monviech (Cedrik)]

Whats the benefit of such a wireguard implementation, wouldnt it be better to use something protocol agnostic that can tunnel any protocol through a websocket like:

https://github.com/erebe/wstunnel

https://github.com/erebe/wstunnel?tab=readme-ov-file#wireguard-and-wstunnel-

[RamSense]

Did you manage to get AmneziaWG plug-in installed and working? Curious to know of it is working well.

[xkpx]

What about: https://github.com/antspopov/opnsense_amnezia_plugin (I am not afflifiated with this repo) ? Does it look complete?

Let's hope they implement it.
Wstunnel is fine but no UI is made for it.

[Monviech (Cedrik)]

We need PRs for this we will not implement this ourselves.