Native-kernel wireguard support for 21.1 feasible? FreeBSD 13 may have it

[FingerlessGloves]

I have to disappoint, but Bavaria already has all the beer in the world to push through.  ;D


Cheers,
Franco

I'm sure a pizza would help soak up the beer, so he can get through all this beer easier 😋

[allebone]

For those of us using wireguard via the plugin will it be possible to migrate the setup to this new method? I have quite a few devices setup using the normal current method.

[mimugmail]

We try to add a checkbox if required

[flushell]

For those of us using wireguard via the plugin will it be possible to migrate the setup to this new method? I have quite a few devices setup using the normal current method.

Came here to ask this.

[allebone]

What I mean is can the current config in the plugin be migrated to the native version when its released so i dont have to reconfigure all my devices in the wild?

[mimugmail]

Sure, everything important is saved in config.xml, rest is magic :)

[franco]

I believe since the only difference is crypto offload to kernel a checkbox should be all the user-facing settings for this and the rest keeps working (even if the configuration needs to be rearranged underneath, plugin job, not user job).


Cheers,
Franco

[allebone]

Thank you.

[allebone]

Sorry to ask... did this get implemented in Opnsense already?

[mimugmail]

No

[Ricardo]

 :D

thatswhy I always try to ask open-ended question, that cannot be answered by a single word

[franco]

Backport of the FreeBSD-CURRENT state is done now:

https://github.com/opnsense/src/commit/bb8e65da8e


Cheers,
Franco

[maclinuxfree]

Great...so it is included in 21.1.3?

[franco]

Define "included". The kernel patch doesn't help anyone with the wireguard plugin yet so rushing this is not useful and creates false expectations.

Furthermore, due to complications in iflib code we will not be targeting 21.1.3 to avoid unnecessary changes in functional areas at this point.


Cheers,
Franco

[franco]

Whoopsie... https://www.phoronix.com/scan.php?page=news_item&px=FreeBSD-New-WireGuard


Cheers,
Franco