Wireguard and Zenarmor in November 2023

Started by allebone, November 24, 2023, 09:58:27 PM

Previous topic - Next topic
Hi There,

I would like to use zenarmor with a wireguard interface but I believe this can only be done with the GO implementation. However GO has not been updated since 1.3 and kernel wireguard is now on 2.5. Is the only method to get this working to use this old version of the package that is no longer maintained?

Kind regards
P

Hi,

The current release does not support the kernel module. However, there is good news - the upcoming release, version 1.16, will include support for the WireGuard kernel module. This new release is planned to be shipped at the beginning of December.

Quote from: allebone on November 24, 2023, 09:58:27 PM
I would like to use zenarmor with a wireguard interface but I believe this can only be done with the GO implementation. However GO has not been updated since 1.3 and kernel wireguard is now on 2.5. Is the only method to get this working to use this old version of the package that is no longer maintained?

I just checked: I have Zenarmor active (on LAN interface, not WAN) and use Kernel-wireguard. Zenarmor is working and blocking some ads etc.

Quote from: sy on November 25, 2023, 10:10:42 AM
Hi,

The current release does not support the kernel module. However, there is good news - the upcoming release, version 1.16, will include support for the WireGuard kernel module. This new release is planned to be shipped at the beginning of December.

That is great news, thank you!

Quote from: sy on November 25, 2023, 10:10:42 AM
Hi,

The current release does not support the kernel module. However, there is good news - the upcoming release, version 1.16, will include support for the WireGuard kernel module. This new release is planned to be shipped at the beginning of December.
Great waiting for it

Quote from: sy on November 25, 2023, 10:10:42 AM
Hi,

The current release does not support the kernel module. However, there is good news - the upcoming release, version 1.16, will include support for the WireGuard kernel module. This new release is planned to be shipped at the beginning of December.

I am running Zenarmor 1.16.1 with WG kernel and it looks like its not working, zenarmor doesn't show any statistics for the WG nor he is able to identify hosts.

Was this feature shipped with the 1.16?

I checked the release documentation for 1.16 and its nowhere mentioned.

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G - VM HA(SOON)
N100   - i226-V | Crucial 16G  4800 DDR5 | S 980 500G - PROD

Hi @Seimus,

It is needed a kernel update as well. Zenarmor engine is ready but needs kernel update. Please check OPNsense release notes about it.