Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WireGuard is submitted for Linux kernel inclusion

marc.info

Post reply on HN
Print view View original

11–20 of 189 posts

Re: WireGuard is submitted for Linux kernel inclusion

#11

Post by StavrosK »

I started using Wireguard two days ago to access my home LAN and love it, I can access everything with one command, as if I'm home. The only problem I have with it is the complete lack of documentation. The tutorial refers to a configuration file, but nowhere on the site does it tell you how to write one.

It also took me days to set up what I think is a common use case, logging in to a server/router at home and accessing the rest of the computers in the LAN. I I couldn't find how to forward/masquerade traffic, and it took some help from the good people at #linux to get it set up. I think it would be a great help if they had a configuration file on their site detailing how to set that up.

Lacking that, I'll write an article with my config so the info is at least out there, but I believe Wireguard is held back by its lack of documentation.

Re: WireGuard is submitted for Linux kernel inclusion

#12

Post by brewrwe »

Osiris wrote: post #10

I have a VPS I use for VPN, which means, unfortunately, no custom kernels or kernel modules. So, I'm stuck with OpenVPN. It would be awesome to have WireGuard included in the kernel by default.

Based on what you stated, I assume this VPS is running on OpenVZ? If so, I doubt it will ever see newer kernel features, in part due to OpenVZ hosts relying on ancient LTS kernel branches and also due to OpenVZ "optimizations", whereby kernel features that use extra resources to enable just get disabled. Or, if your lucky they'll give you a button to re-enable them for youe container on an ad-hoc basis.

Heads up, $20 yearly and similar KVM deals are becoming more common, and you can run any kernel you want in KVM :P

Re: WireGuard is submitted for Linux kernel inclusion

#13

Post by foobarbazetc »

The biggest issue we’ve encountered with WireGuard is that it doesn’t (yet?) support GRO, which means the kernel doesn’t combine multiple sequential TCP frames inside the tunnel into one before presenting it to a program. This increases RTT by a significant amount.

Re: WireGuard is submitted for Linux kernel inclusion

#14

Post by ryanlol »

StavrosK wrote: post #11

I started using Wireguard two days ago to access my home LAN and love it, I can access everything with one command, as if I'm home. The only problem I have with it is the complete lack of documentation. The tutorial refers to a configuration file, but nowhere on the site does it tell you how to write one. It also took me days to set up what I think is a common use case, logging in to a server/router at home and acces…

I've been using wg for over a year now and never had any difficulty finding documentation.

`man wg` works just fine as does `man wg-quick`

https://www.wireguard.com/quickstart/ also shows you how to make a config file

Re: WireGuard is submitted for Linux kernel inclusion

#15

Post by pferde »

The only downside with WireGuard for me is that it only works over UDP. I am in a situation where I only have two or three TCP ports available for a VPN, so I won't be moving off OpenVPN anytime soon.

I was following WG development for a while now and I think it's a great project, but sadly not for my particular use case.

Re: WireGuard is submitted for Linux kernel inclusion

#16

Post by [deleted] »

viraptor wrote: post #9
1023bytes wrote: post #8

Why does this need to be included in the kernel directly and not just as a loadable module?

When the API it relies on changes, the person doing the change will fix WG rather than the WG maintainers. Also it enables you to update the kernel without having to hunt for the matching release of WG separately.

[deleted]

Re: WireGuard is submitted for Linux kernel inclusion

#18

Post by simias »

ofrzeta wrote: post #2

Great news. I started using Wireguard instead of OpenVPN and won't look back. Actually it was easy to set up even with DKMS kernel modules but having it in mainline will be great.

Can you explain what makes it better than venerable old OpenVPN?

Re: WireGuard is submitted for Linux kernel inclusion

#19

Post by bubblethink »

dtx1 wrote: post #4
ofrzeta wrote: post #2

Great news. I started using Wireguard instead of OpenVPN and won't look back. Actually it was easy to set up even with DKMS kernel modules but having it in mainline will be great.

Do you only use it to connect remotely into your home network or are there VPN Services for wireguard available?

Azire gives free WG access while in beta

Re: WireGuard is submitted for Linux kernel inclusion

#20

Post by jwilk »

brewrwe wrote: post #12
Osiris wrote: post #10

I have a VPS I use for VPN, which means, unfortunately, no custom kernels or kernel modules. So, I'm stuck with OpenVPN. It would be awesome to have WireGuard included in the kernel by default.

Based on what you stated, I assume this VPS is running on OpenVZ? If so, I doubt it will ever see newer kernel features, in part due to OpenVZ hosts relying on ancient LTS kernel branches and also due to OpenVZ "optimizations", whereby kernel features that use extra resources to enable just get disabled. Or, if your lucky they'll give you a button to re-enable them for youe container on an ad-hoc basis. Heads up, $20…

Where do you get these $20/y deals?
Post reply on HN