search

FingerlessGlov3s / OPNsensePIAWireguard

This script automates the process of getting Wireguard setup on OPNsense to connect to PIA's NextGen Wireguard servers. It will create Wireguard Instance(Local) and Peer(Endpoint) on your OPNsense setup.
BSD 3-Clause "New" or "Revised" License
179 stars 30 forks source link

Wireguard kernelmod #11

Closed changemenemo closed 3 years ago

changemenemo commented 3 years ago

Hi,

You add a new subsection for the kernel mod recently. But I don't know if you've seen the FreeBSD mailing list where they were discussing the wireguard module and where the netgate's people have obviously a big say on them... they want(Ed) to pull it back from the repo since apparently there is a lot of bugs or potential exploits in it. I can provide you the link if you didn't see it. And so I wanted to have your input on this and also you didn't say in what way it changes things for our configuration when adding the module for the kernel ?

Thanks 🙏 in advance

FingerlessGlov3s commented 3 years ago

Hi @boistordu,

I'll update the kernel module section with more detail on what it is and what it does.

The actual kernel module is from https://www.freshports.org/net/wireguard-kmod/ which is the new module code written by Jason A. Donenfeld and co. Source Code for the kernel module can be found here https://git.zx2c4.com/wireguard-freebsd/

At this time this code is new, unvetted, possibly buggy, and should be
considered "experimental". It might contain security issues. We gladly
welcome your testing and bug reports, but do keep in mind that this code
is new, so some caution should be exercised at the moment for using it
in mission critical environments.

I hope this clears things up for you?

FingerlessGlov3s commented 3 years ago

https://github.com/FingerlessGlov3s/OPNsensePIAWireguard/commit/21c37717ae755a643dd1cf1b10346a93560bb504 Commit to update README