pfSense-pkg-wireguard icon indicating copy to clipboard operation
pfSense-pkg-wireguard copied to clipboard

Published 20 hours ago • verified publisher icon Ascrod

WG post pfSense 2.5.x

Open vajonam opened this issue 3 years ago • 6 comments

@Ashus With the whole wireguard/freeBSD kernel fiasco. I think focus will shift to this project for folks who like the simplicity and speed of WG.

Any thoughts on if you are going to do any more dev on this, to get it ready for pfsense 2.5.x when they will most likely remove the wg kenrel code.

vajonam avatar Mar 19 '21 17:03 vajonam

Sorry, but this package is now deprecated with the new pfSense official support of Wireguard. Personally I tried to upgrade and ended up with a week of sleepless nights of restoring the old setup of pfSense 2.4.5p1 with this. The biggest issue is inability to shape traffic in new pfSense 2.5.0.

Ashus avatar Mar 19 '21 17:03 Ashus

Hmm.. so even after this?

https://www.netgate.com/blog/wireguard-removed-from-pfsense-ce-and-pfsense-plus-software.html

vajonam avatar Mar 20 '21 13:03 vajonam

Whoa. Well this package is not FreeBSD kernel support for Wireguard. This package is a way to enable configuring Wireguard tunnels via GUI and a way to automatically set the tunnels up on reboot. Anyways it seems taking changes regarding Wireguard support from pfSense official sources and porting them to 2.4.5 would be less work to achieve multi-server functionality editable in GUI. In all cases, we are dependant on Wireguard support in kernel, namely packages wireguard and wireguard-go from FreeBSD repositories. If that is being dropped, there is no other way than to use old versions of pfSense.

Ashus avatar Mar 20 '21 20:03 Ashus

The packages as far as I understand will still live on, it's the in-kernel wg stuff that will be backed out. So I think it might be time to resurrect this whole thing once the dust settles a little bit.

vajonam avatar Mar 20 '21 21:03 vajonam

After pfSense releases an update sans-wireguard,

It might an idea to test it out. I am happy to test it out on a VM.

These packages exist for FreeBSD 12 https://pkg.freebsd.org/FreeBSD:12:amd64/latest/All/wireguard-1.0.20210315.txz https://pkg.freebsd.org/FreeBSD:12:amd64/latest/All/wireguard-go-0.0.20210212,1.txz

vajonam avatar Mar 20 '21 21:03 vajonam

btw, the kernel module is definitely still being built, just out of the main source tree. It is available in ports.

https://github.com/theonemcdonald/pfSense-pkg-WireGuard

rcmcdonald91 avatar Apr 07 '21 13:04 rcmcdonald91