PIA on Wireguard

menethoran

Hey gents,
Has anyone successfully set up wireguard using PIA as their provider? SUPER Noob on wireguard, so, any documentation would be fantastic (ive been trying to piece together other VPN providers and their integration with Wireguard, but havent been able to figure out how to make the jump from them to PIA in wireguard.

Thanks in advance for any help.

mcury

@menethoran I don't think PIA is compatible with pfsense wireguard.

Based on the Christian McDonald's Youtube videos, you would need to import a wireguard config file to pfsense.. I know that Mullvad is compatible..

In case you can configure and make it work, please share..

menethoran

@mcury yeah, i was looking at mullvad as someone has an OPNSense tutorial for it, and its relatively easy to follow (its actually what i was basing some of what i was trying to do on... )

I think im gonna see if i can break... cough cough, err.. i mean, fix wireguard to work with PIA (there's no real reason why it wouldnt, PIA has already implemented wireguard usage on their end...

Ill report in if i figure anything out. I also stumbled across another post on here, maybe the author @Slugger and i can team up and beat it with sticks til it cooperates.

here is sluggers post:
https://forum.netgate.com/topic/161550/interest-in-a-wg-manager-for-pia?_=1643398513647

mcury

@menethoran said in PIA on Wireguard:

I think im gonna see if i can break... cough cough, err.. i mean, fix wireguard to work with PIA (there's no real reason why it wouldnt, PIA has already implemented wireguard usage on their end...

PIA requires an app, the problem is not with pfsense wireguard implementation..

@menethoran said in PIA on Wireguard:

Ill report in if i figure anything out. I also stumbled across another post on here, maybe the author @Slugger and i can team up and beat it with sticks til it cooperates.
here is sluggers post:
https://forum.netgate.com/topic/161550/interest-in-a-wg-manager-for-pia?_=1643398513647

Thanks, I have PIA too, so it would be good for me too

menethoran

@mcury PIA doesnt require an app. You can very easilly set up PIA via OpenVPN (on most systems) and you can "bake it into Ubuntu" and use a drop down menu like you do with Wifi.

IIRC, PIA even has documentation on how to set it up without using their app.

(Pause while i look it up)

https://gist.github.com/laineantti/176b1a12d49e4048e39d4523b589b666

mcury

@menethoran For wireguard, you can't connect to it without an app.
Through openvpn you can..

bobpaul

You can use the linux app to create the wireguard connection. Then you can use the wg and wg-quick commands to export the configured wgpia0 interface to a .conf. You can now use that configuration without the app.

something like this:

$ piactl login
$ piactl set protocol wireguard
$ piactl get regions #list the region names
$ piactl set region auto #if you don't care
$ piactl connect
$ sudo wg showconf wgpia0 | sudo tee ./wgpia0.conf
$ sudo wg-quick save ./wgpia0.conf
$ piactl disconnect
$ sudo wg-quick up ./wgpia0.conf

I haven't tried it with pfsense yet. If you want to use the vpn's DNS, make sure you capture that. Neither wg showconf nor wg-quick save grabbed that, at least on my system.

omid_1985

@menethoran Yes, I have used this script to generate a config from the Sydney, Australia server, and It's working fine. However, as PIA does not provide the official method to do this on pfSense, I'm not sure if it will work as reliably as other VPN providers who do offer it. Still, it stayed connected for two days and survived two pfSense reboots, so PIA didn't nuke my generated config just because I got disconnected for a few minutes, which is good.