OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • OPNsense 21.1.6 / Sensei 1.9 Wireguard -kmod compatible ? no filtering, CPU full
« previous next »
  • Print
Pages: [1]

Author Topic: OPNsense 21.1.6 / Sensei 1.9 Wireguard -kmod compatible ? no filtering, CPU full  (Read 1726 times)

Mondmann

  • Jr. Member
  • **
  • Posts: 73
  • Karma: 7
    • View Profile
OPNsense 21.1.6 / Sensei 1.9 Wireguard -kmod compatible ? no filtering, CPU full
« on: May 28, 2021, 08:11:47 pm »
Hello guys,
my question:
Is wireguard -kmod supported in OPNsense 21.1.6 with Sensei
1.9 supported.
With enabled wireguard - (wg0/wg1) interface in Sensei 1.9 there is no filtering of traffic.
Furthermore I noticed that the CPU load stays for a long time at full load up to
up to 90% for a long time and only normalizes when the wireguard interface is removed from Sensei.
Did I miss something? or are the hardworking Sunnyvalley guys still working on this?
a solution?

my setting: *Routed Mode (L3 Mode, Reporting + Blocking) with native netmap driver

Thanks in advance for a hint

Greetings from Germany
« Last Edit: May 28, 2021, 08:17:32 pm by Mondmann »
Logged
OPNsense 22.7.9*WG-kmod*OpenSSL*OpenVPN* AdGuardHome*i7-7700*32GB*256SSD*ix0-1, igb0-4, em0*OpenVPN+Wireguard WG0, WG1*NetGear ProSafe XS508*AP Netgear WAX610*alles echtes Blech* Sorry, my English is translated via app*

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 15120
  • Karma: 1308
    • View Profile
Re: OPNsense 21.1.6 / Sensei 1.9 Wireguard -kmod compatible ? no filtering, CPU full
« Reply #1 on: May 28, 2021, 08:42:31 pm »
Hi,

wireguard-kmod is generally unsupported / experimental at the moment. And, yes, while wiregard-go is based on tun(4) devices packets can be inspected. That is not the case with the kernel module code which is its stripped-down driver counterpart without netmap(4) support.


Cheers,
Franco
Logged

Mondmann

  • Jr. Member
  • **
  • Posts: 73
  • Karma: 7
    • View Profile
Re: OPNsense 21.1.6 / Sensei 1.9 Wireguard -kmod compatible ? no filtering, CPU full
« Reply #2 on: May 29, 2021, 12:27:58 am »
@franco
thanks for the info...
Logged
OPNsense 22.7.9*WG-kmod*OpenSSL*OpenVPN* AdGuardHome*i7-7700*32GB*256SSD*ix0-1, igb0-4, em0*OpenVPN+Wireguard WG0, WG1*NetGear ProSafe XS508*AP Netgear WAX610*alles echtes Blech* Sorry, my English is translated via app*

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • OPNsense 21.1.6 / Sensei 1.9 Wireguard -kmod compatible ? no filtering, CPU full
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2