Re: [ANNOUNCE] OPNsense 19.7 supports WireGuard

2019-08-28 Thread Muenz, Michael
Am 28.08.2019 um 21:08 schrieb Alex Davies: This is great news. We have been using wireguard on OPNSense (mostly as servers, but also as a client in a few places) in production for some time now, without drama (we found one bug with a trivial workaround, see email chain "Table=off behavior (not

[PATCH] device: make locks more efficient

2019-08-28 Thread liuhaichao
From: Haichao Liu Change-Id: I515c38e9911d4baeb4c2a45249c18a371864f8e1 Signed-off-by: Haichao Liu --- device/uapi.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/device/uapi.go b/device/uapi.go index 99cb421..c8499e2 100644 --- a/device/uapi.go +++ b/device/uapi.go @@

Re: [ANNOUNCE] OPNsense 19.7 supports WireGuard

2019-08-28 Thread Alex Davies
This is great news. We have been using wireguard on OPNSense (mostly as servers, but also as a client in a few places) in production for some time now, without drama (we found one bug with a trivial workaround, see email chain "Table=off behavior (not adding any route *at all*)" to this list). We c

Re: [PATCH] Makefile: rework kernel version logic

2019-08-28 Thread Jason A. Donenfeld
Merged as: https://git.zx2c4.com/WireGuard/commit/?id=dcca03f27879701d7377109517176a3aae86619f Every place else uses KERNELRELEASE, so I've changed the variable to that. Thanks for the patch. Jason ___ WireGuard mailing list WireGuard@lists.zx2c4.com

[PATCH] Makefile: rework kernel version logic

2019-08-28 Thread Mikk
This makes depmod actually work when building/installing the module for a kernel other than the currently running one Signed-off-by: Mikk --- src/Makefile | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/Makefile b/src/Makefile index 24b2ba0..d0d6c4d 100644 --- a/src

Re: need a hand with WG setup

2019-08-28 Thread Dimitar Vassilev
Hi Kalin, 1. Disable the FW and test. > Tried - disabling one fw shows wg traffic flowing. > 2. Try ping from one router to the other using the configured public IP > address > > That works as well with the default fw config on OpenWRT/LEDE/LibreCMC > 3. Ping the other using the WG IP address

Re: Keep-alive does not keep the connection alive

2019-08-28 Thread Laszlo KERTESZ
> As a workaround you could > - unconditionally periodically update the endpoint > - monitor last handshake time, when large update endpoint or restart > tunnel > - add keepalive to server - it might reduce your downtime > Keepalive does not seem to work in my experience. On Linux i set