In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#1

Post by xoa » Tue, Mar 16, 2021, 11:53 AM UTC

In-kernel WireGuard is on its way to FreeBSD and the pfSense router
arstechnica.com

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#2

Post by freedom42 » Tue, Mar 16, 2021, 12:51 PM UTC

PSA:

pfSense is closed-source [1]. It was discussed last month here on HN [2]. OPNsense is the equivalent FOSS alternative [3].

[1] https://github.com/rapi3/pfsense-is-closed-source

[2] https://news.ycombinator.com/item?id=25894420

[3] https://en.wikipedia.org/wiki/OPNsense

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#3

Post by lambda_obrien » Tue, Mar 16, 2021, 4:38 PM UTC

I'll have to take a look at freebsd, does anyone have a good reference to the differences in a bsd versus Linux?

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#4

Post by andrius4669 » Tue, Mar 16, 2021, 4:41 PM UTC

Link to relevant announcement email: https://lists.zx2c4.com/pipermail/wireguard/2021-March/00649...

There's also Jason's reply to apparently not-nice feedback of someone from NetGate: https://lists.zx2c4.com/pipermail/wireguard/2021-March/00649...

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#5

Post by mig39 » Tue, Mar 16, 2021, 4:47 PM UTC

freedom42 wrote: post #2

PSA: pfSense is closed-source [1]. It was discussed last month here on HN [2]. OPNsense is the equivalent FOSS alternative [3]. [1] https://github.com/rapi3/pfsense-is-closed-source [2] https://news.ycombinator.com/item?id=25894420 [3] https://en.wikipedia.org/wiki/OPNsense

I don't think this is completely accurate, nor is it recent.

Their "community edition" is open source and free:

https://www.pfsense.org/download/

Also, they have https://github.com/pfsense/

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#6

Post by freedom42 » Tue, Mar 16, 2021, 4:54 PM UTC

mig39 wrote: post #5

freedom42 wrote: post #2

PSA: pfSense is closed-source [1]. It was discussed last month here on HN [2]. OPNsense is the equivalent FOSS alternative [3]. [1] https://github.com/rapi3/pfsense-is-closed-source [2] https://news.ycombinator.com/item?id=25894420 [3] https://en.wikipedia.org/wiki/OPNsense

I don't think this is completely accurate, nor is it recent. Their "community edition" is open source and free: https://www.pfsense.org/download/ Also, they have https://github.com/pfsense/

Then idk what this comment [1] means. Maybe someone could clarify?

[1] https://news.ycombinator.com/item?id=25915295

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#7

Post by tachion » Tue, Mar 16, 2021, 4:56 PM UTC

lambda_obrien wrote: post #3

I'll have to take a look at freebsd, does anyone have a good reference to the differences in a bsd versus Linux?

https://docs.freebsd.org/en/articles/explaining-bsd/comparin...

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#8

Post by WarOnPrivacy » Tue, Mar 16, 2021, 5:00 PM UTC

I've been waiting for pfSense+Wireguard for a while. OpenVPN has been very good to me but I'm psyched to trade up.

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#9

Post by annoyingnoob » Tue, Mar 16, 2021, 5:03 PM UTC

lambda_obrien wrote: post #3

I'll have to take a look at freebsd, does anyone have a good reference to the differences in a bsd versus Linux?

If it helps, OSX is based on BSD. I've had great success with pfSense.

I found great tuning advice here: https://calomel.org

Edit: Not sure why I'm getting down votes for trying to provide info. I didn't down vote anything in this thread.

Re: In-kernel WireGuard is on its way to FreeBSD and the pfSense router

#10

Post by k_roy » Tue, Mar 16, 2021, 5:03 PM UTC

mig39 wrote: post #5

freedom42 wrote: post #2

PSA: pfSense is closed-source [1]. It was discussed last month here on HN [2]. OPNsense is the equivalent FOSS alternative [3]. [1] https://github.com/rapi3/pfsense-is-closed-source [2] https://news.ycombinator.com/item?id=25894420 [3] https://en.wikipedia.org/wiki/OPNsense

I don't think this is completely accurate, nor is it recent. Their "community edition" is open source and free: https://www.pfsense.org/download/ Also, they have https://github.com/pfsense/

Except it's not. The source that is provided doesn't actually build pfSense as shipped. Plus there are binaries that no source is provided for that "you don't need to worry about"