[ANNOUNCE] OPNsense 19.7 supports WireGuard

[Alex Davies]

This is great news. We have been using wireguard on OPNSense (mostly as
servers, but also as a client in a few places) in production for some time
now, without drama (we found one bug with a trivial workaround, see email
chain "Table=off behavior (not adding any route *at all*)" to this list).
We can now upgrade to something formally "supported" ;-)

If anybody else tries to use the hardware appliances provided by the
founders of OPNSense (Deciso[1]) as a wireguard server or client, we found
the performance on the non-x86 CPUs (A10, etc.) was not great (they have
all sorts of ipsec type offloads, but not for WG). IIRC we struggled to get
more than a few gigabits per second in aggregate. The Intel E3 models are
able to run as close to line rate on 10G as makes no odds for us.

[1]
https://www.deciso.com/wp-content/uploads/2015/11/Brochure-OPNsense-appliances_ordered-rev201603.pdf


On Mon, Aug 26, 2019 at 1:32 PM Varun Priolkar <me at varunpriolkar.com> wrote:

> Congratulations! :) I did test it out when it wasn’t stable and well
> things weren’t stable(as expected). Hope to have an another crack at it.
>
> On Sun, 25 Aug 2019 at 21:32, Jason A. Donenfeld <Jason at zx2c4.com> wrote:
>
>> Congratulations on the release. That's great news.
>>
>> Would you like me to add some blurb to https://www.wireguard.com/install/
>> on it?
>> _______________________________________________
>> WireGuard mailing list
>> WireGuard at lists.zx2c4.com
>> https://lists.zx2c4.com/mailman/listinfo/wireguard
>>
> --
> Regards,
>
> Varun Priolkar
> _______________________________________________
> WireGuard mailing list
> WireGuard at lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zx2c4.com/pipermail/wireguard/attachments/20190828/dd7c603a/attachment.html>