Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by F00Fbug | Hacker News Reader

Full thread

F00Fbug·

This is a big step forward!

I'm hoping that the 1.0 release will prompt Netgate to consider inclusion in pfSense.

View on HN

Yes! The fact that it's not in pfSense is pretty much the only reason why I'm still using openvpn.

Same with OPNSense.

Wireguard is available as a plugin in Opnsense. I use it regularly.

pfSense is a FreeBSD downstream, right? First you'd have to port Wireguard to FreeBSD. Or you could run the userspace server, but expect poor performance.

Userspace already has a package https://www.freshports.org/net/wireguard/

Boringtun (cloudflare's rust implementation of wireguard in userspace) also has work in progress FreeBSD support apparent[1].

[1]: https://github.com/cloudflare/boringtun/pull/35

Yes, I know; I use it myself. It's not the same thing as a kernel C implementation.

Exactly. Netgate has long said that they won't touch it until it's production-ready; they keep pointing to the warning messages in WireGuard saying that it's beta and when the time is right, they'll consider it.

I'm happy they're being cautious. The inclusion in the Linux kernel is perhaps (to Netgate) a sign that things are headed in the right direction.

As far as FreeBSD, all that exists today is a userspace package (AFAIK). Again, I'm hoping someone sees this as a step forward and will start working on the FreeBSD port.

I'm glad to see progress and hoping for more of it!

Netgate here, we’re already working on a kernel-resident version for FreeBSD (and thus, pfsense.)

You guys rock!!!

Reply on news.ycombinator.com