Earlier quoted context omitted.
As does VyOS.
Anyone have any experience here with getting wireguard running on pfsense?
I don't think *BSD supports wg yet. would love to see this
WireGuard support in Mikrotik RouterOS v7.1beta2
41–50 of 79 posts
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#42Earlier quoted context omitted.
It's not. Why would one want that workload on their router when they can offload it to a $35 Pi?
One of the main selling points of Wireguard is that it runs much leaner than OpenVPN or IPSec tunnels, especially on embedded hardware, so there isn’t much of a workload in the first place.
Crypto used by IPSec (aes, sha) is often accelerated by hardware - and the above mentioned Ubiquiti has hardware for that. Chacha/Poly used by Wireguard are not.
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#43Earlier quoted context omitted.
It's not. Why would one want that workload on their router when they can offload it to a $35 Pi?
One of the main selling points of Wireguard is that it runs much leaner than OpenVPN or IPSec tunnels, especially on embedded hardware, so there isn’t much of a workload in the first place.
IPsec is pretty light.
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#44Has MikroTik ever made any source code available?
A cursory Google search says yes. Not as a public repo or anything, but if you ask them, you'll get it. Examples here: https://forum.openwrt.org/t/mikrotik-gpl-source/6750/10
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#45Has MikroTik ever made any source code available?
Supposedly its available by request (which is all that is required by GPL). An old-ish copy is here: https://github.com/robimarko/routeros-GPL
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#46The ball's in your court, Ubiquiti
Not ubiquiti's doing but this repo has pre-built kernel modules of wireguard and vyatta integration for I think most of the edgerouter series: https://github.com/WireGuard/wireguard-vyatta-ubnt I haven't updated/tested in awhile but last I remember I was seeing 800+ mbit/s on my dinky mips ER-X. Pretty amazing and easy to use.
Unfortunately 3rd party software installs are lost on updates, so you need to be local to the router before upgrading (or have a secondary VPN available).
Development of EdgeOS has really slowed down though, there hasnt been a stable firmware update in 6 months (and that was just a small hotfix).
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#47Earlier quoted context omitted.
Anyone have any experience here with getting wireguard running on pfsense?
I don't think *BSD supports wg yet. would love to see this
AFAIU OpenBSD has official support for Wireguard: https://man.openbsd.org/wg
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#48OpenWRT has support for WireGuard as well.
its very handy, I like having a gui to set wg up.
Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#49Re: WireGuard support in Mikrotik RouterOS v7.1beta2
#50Earlier quoted context omitted.
One of the main selling points of Wireguard is that it runs much leaner than OpenVPN or IPSec tunnels, especially on embedded hardware, so there isn’t much of a workload in the first place.
IPsec is pretty light.
Doesn't feel light to setup if you're trying to get a tunnel working between different providers. We had a strange dead peer issue between Fortigate and Mikrotik and could never figure it out as it happened so rarely. All phase 1 and phase 2 settings were identical. I can imagine that happens elsewhere too.