what does this mean for users of wireguard? An explanation for linux noobs?
WireGuard is in net-next
11–20 of 208 posts
Re: WireGuard is in net-next
#12what does this mean for users of wireguard? An explanation for linux noobs?
It means that WireGuard will be included in your distro's kernel, which will ease installation. Before, you had to do some ugly kernel module compilation steps, usually using dkms, which was prone to failure and was a general nightmare to deal with. Moving forward, you'll just run "apt install wireguard-tools", and you'll be all set.
To temper expectations, though, this is slated for 5.6, which won't be released for another ~120 days or so. After that point it will trickle down to distros. So there's some time yet before users start seeing the direct consequences of this exciting announcement, but it'll be coming.
Re: WireGuard is in net-next
#13what does this mean for users of wireguard? An explanation for linux noobs?
It means that WireGuard will be included in your distro's kernel, which will ease installation. Before, you had to do some ugly kernel module compilation steps, usually using dkms, which was prone to failure and was a general nightmare to deal with. Moving forward, you'll just run "apt install wireguard-tools", and you'll be all set. To temper expectations, though, this is slated for 5.6, which won't be released for…
I installed wireguard via ppa on my ubuntu based distro, which wasn't too much of a pain. Are you referring to the "hacks" needed in your install section on the website for e.g. Red Hat/Cent OS?
very happy with the performance and stability, thanks a lot for your work!
Re: WireGuard is in net-next
#14How it fares against IPSec?
way simpler (and thus, I would argue, way more secure). way faster.
On the other hand: No built-in client in any of the mobile OSes, so a third-party client install is required.
Re: WireGuard is in net-next
#15How it fares against IPSec?
A simple websearch yields following:
https://www.wireguard.com/performance/
https://an.undulating.space/post/181227-er_alternate_firmwar...
...and more. Put some minimum effort in yourself, man!
Re: WireGuard is in net-next
#16Does this mean WireGuard will be moving to stable?
My VPN provider has said they won't support WireGuard until it hits 1.0
Re: WireGuard is in net-next
#17Earlier quoted context omitted.
It means that WireGuard will be included in your distro's kernel, which will ease installation. Before, you had to do some ugly kernel module compilation steps, usually using dkms, which was prone to failure and was a general nightmare to deal with. Moving forward, you'll just run "apt install wireguard-tools", and you'll be all set. To temper expectations, though, this is slated for 5.6, which won't be released for…
I installed wireguard via ppa on my ubuntu based distro, which wasn't too much of a pain. Are you referring to the "hacks" needed in your install section on the website for e.g. Red Hat/Cent OS? very happy with the performance and stability, thanks a lot for your work!
No, I'm referring to that PPA, which includes the error-prone DKMS stuff. I'm glad it worked for you. Indeed we've put a lot of effort into ensuring that our DKMS stuff mostly _does_ work properly. Sometimes it doesn't though, and then it's a huge hassle. It's this hassle, for people less lucky than yourself with DKMS, that will go away with Linux 5.6.
Re: WireGuard is in net-next
#18Does this mean WireGuard will be moving to stable? My VPN provider has said they won't support WireGuard until it hits 1.0
Yes. A 1.0 is now on the horizon.
Re: WireGuard is in net-next
#19Yes!
Hoping this will will have a pervasive effect like https in the networking world, esp for point to points that glue things together behind the scene. Encrypt all the things!
Re: WireGuard is in net-next
#20what does this mean for users of wireguard? An explanation for linux noobs?
It means that WireGuard will be included in your distro's kernel, which will ease installation. Before, you had to do some ugly kernel module compilation steps, usually using dkms, which was prone to failure and was a general nightmare to deal with. Moving forward, you'll just run "apt install wireguard-tools", and you'll be all set. To temper expectations, though, this is slated for 5.6, which won't be released for…
It works mostly without problems, but be careful relying on it as a sole means of accessing your server. I've locked myself out (luckily it was just a test server) by closing SSH port on public IP and allowing it only on Wireguard interface. One day I updated the kernel, dev headers got mixed up and my wg0 interface didn't come up after reboot.