Live data from Hacker News

WireGuard support in Mikrotik RouterOS v7.1beta2

forum.mikrotik.com

51–60 of 79 posts

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#51
post #34

We have been waiting for years for UDP OpenVPN, but we get WireGaurd before most major distros. That's something

Actually, WireGuard has first class support now on a large number of distros, without the need for any additional compilation: Ubuntu 16.04, 18.04, 20.04, Fedora, Debian, OpenSUSE, Arch, Mandriva, Alpine, Nix, Void, OpenWRT, and others. Check out www.wireguard.com/install/ for the whole list.

Even windows

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#52
post #2

That was actually really fast considering how long wireguard has(n't) been around. We don't even have it in stable Linux distributions yet. I guess there is some significant demand for it from Mikrotik's customers. I'll probably use it.

There are lots of stable Linux distros running the stable kernel which is 5.8. it is just distros like RHEL that call themselves stable, but are actually antiquated and honestly just give users a bad experience because most of the software is outdated. Wouldn't expect anything less from IBM.

You are simply not the target audience for enterprise Linux distros. But they have their uses, and I am glad that they exist.

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#53

The ball's in your court, Ubiquiti

Yeah well don't hold your breath :(. Ubiquiti has been a cluster fuck for a while now and are busy redoing and downgrading the UI again for like the 3rd or 4th time in the last few years rather then add desperately needed basic features. They've released new gateway devices with their own new distro based around containerization, then not actually put that to work at all. DNS still a joke. Zero story for key&certificate management/let's encrypt/etc.

Maybe Pera will get hit by a bus and things will get turned around but otherwise it's a sad mess and waste of potential.

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#54
post #5

Has MikroTik ever made any source code available?

I've gotten kernel patches (and some other GPL bits and bobs, although with time they got rid of everything other than the kernel) on request for ROS6.

For ROS7, however, support said in June:

    That is not yet readily available since v7 is not really complete yet and is during heavy development right now, everything is changing, including the kernel. I will inquire how long it will take to get the files you need and will let you know once I have some information.
This is a good reminder to ping them again about this.

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#55
post #7

Earlier quoted context omitted.

who knows, but I run openwrt on my mikrotik rb2011* switches.

Do you happen to know, if the RB2011 will be stuck on the (dead-end) ar71xx release, or whether somebody is working on porting it to the newer ath79 platform with LTS?

It doesn't seem like porting new devices to ath79 is very involved [1]. I would highly encourage you to make a project out of porting RB2011.

[1] - https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=7a...

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#56
post #36

Earlier quoted context omitted.

I was never a fan of RHEL even before they got purchased. They've done some great things lately with Podman, Buildah, Skopeo, etc but never really been an innovator when it comes to desktop Linux. I see Arch and Alpine being the real innovators, and projects like wlroots.

Just "not for me". It's for enterprise as the name says.

So is Alpine Linux. Almost no enterprise I've worked at lately wants to deal with antiquated software as long as their Kubernetes distro is working well.

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#57
post #7

Earlier quoted context omitted.

who knows, but I run openwrt on my mikrotik rb2011* switches.

Do you happen to know, if the RB2011 will be stuck on the (dead-end) ar71xx release, or whether somebody is working on porting it to the newer ath79 platform with LTS?

This is the first I've heard of this. I didn't know it could map to a new platform.

I have two and just got them working and haven't updated in maybe a year. I use them as internal switches and only really use vlans + dhcp.

It might be interesting to see if porting is a big deal. I have one annoying weirdness where ports are labeled sfp,1-5,6-10, but the logical mapping is really screwed up switch0:6, switch0:1,2,3,4,5, then switch1:5,4,3,2,1 (reversed)

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#58
post #14

Earlier quoted context omitted.

Redhat did that before they were bought by IBM.

I was never a fan of RHEL even before they got purchased. They've done some great things lately with Podman, Buildah, Skopeo, etc but never really been an innovator when it comes to desktop Linux. I see Arch and Alpine being the real innovators, and projects like wlroots.

How did Arch and Alpine innovate ?

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#59
post #50
post #43

Earlier quoted context omitted.

IPsec is pretty light.

Doesn't feel light to setup if you're trying to get a tunnel working between different providers. We had a strange dead peer issue between Fortigate and Mikrotik and could never figure it out as it happened so rarely. All phase 1 and phase 2 settings were identical. I can imagine that happens elsewhere too.

Try enabling Dead Peer Detection (DPD).

Re: WireGuard support in Mikrotik RouterOS v7.1beta2

#60
post #25

Earlier quoted context omitted.

It's not. Why would one want that workload on their router when they can offload it to a $35 Pi?

I understand that amateurs love the Pi and other underpowered, junk hardware, but not everybody wants yet another science project in their life.

"It's free!" they say, if you can get it to run The Geeks say, "Hey, that's half the fun!" Yeah, but I got a girlfriend, and things to get done The Linux OS SUCKS (I'm sorry to say it, but it does.)

https://genius.com/Three-dead-trolls-in-a-baggie-every-os-su...

Post reply on HN