Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WireGuard lives!

    Scheduled Pinned Locked Moved WireGuard
    90 Posts 17 Posters 28.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • cmcdonaldC
      cmcdonald Netgate Developer @psp
      last edited by

      @psp Thanks for the update!

      Need help fast? https://www.netgate.com/support

      1 Reply Last reply Reply Quote 1
      • V
        vjizzle
        last edited by

        Waiting anxiously for tutorial and easy installation option. However don’t rush it, we all know how that goes 😂.

        1 Reply Last reply Reply Quote 1
        • KOMK
          KOM
          last edited by

          I'm wondering if it's a simple matter to just scp the 4 package files over and then run pkg on each one to install them, then reboot?

          1 Reply Last reply Reply Quote 0
          • V
            vajonam Rebel Alliance
            last edited by vajonam

            Yup that is it.. I like to install them in the order of dependency.

            wireguard-kmod, bash, wireguard-tools and then pkg-Wireguard. With the latest kmod we are seeing some KPs and other wierdness. So remeber this is experimental. don't run on prod and backup before you make any chagnes.

            1 Reply Last reply Reply Quote 1
            • C
              chrisjmuk
              last edited by

              I cant get it to work.

              I am not even sure if its connecting and i am not sure how the NAT should be configured so that all traffic goes via wireguard as it no longer makes a gateway.

              Kind Regards,
              Chris

              cmcdonaldC 1 Reply Last reply Reply Quote 0
              • cmcdonaldC
                cmcdonald Netgate Developer @chrisjmuk
                last edited by

                @chrisjmuk so you’ll need to create your own gateway entry manually, and then policy route over it as usual

                Need help fast? https://www.netgate.com/support

                C 1 Reply Last reply Reply Quote 0
                • C
                  chrisjmuk @cmcdonald
                  last edited by

                  @theonemcdonald i know how to create the gateway and set the rule in the firewall to go to the specific gateway, or am i missing something else?

                  cmcdonaldC 1 Reply Last reply Reply Quote 0
                  • cmcdonaldC
                    cmcdonald Netgate Developer @chrisjmuk
                    last edited by

                    @chrisjmuk What VPN provider are you using?

                    Need help fast? https://www.netgate.com/support

                    C 1 Reply Last reply Reply Quote 0
                    • C
                      chrisjmuk @cmcdonald
                      last edited by

                      Mullvad VPN - used before on pfSense 1.5.1 Dev

                      These are my settings - i have removed the keys on purpose and will change.

                      Screenshot_2021-05-05 pfSense home arpa - VPN WireGuard Tunnels Edit.png

                      Screenshot_2021-05-05 pfSense home arpa - VPN WireGuard Peers Edit.png

                      Screenshot_2021-05-05 pfSense home arpa - System Routing Gateways Edit.png

                      Screenshot_2021-05-05 pfSense home arpa - Interfaces mlvdgb12 (tun_wg0).png

                      cmcdonaldC 1 Reply Last reply Reply Quote 0
                      • cmcdonaldC
                        cmcdonald Netgate Developer @chrisjmuk
                        last edited by

                        @chrisjmuk I will get a mullvad subscription to test

                        Need help fast? https://www.netgate.com/support

                        1 Reply Last reply Reply Quote 0
                        • C
                          chrisjmuk
                          last edited by

                          @theonemcdonald its free for 24 hours.

                          also getting this error

                          Crash report begins.  Anonymous machine information:
                          
                          amd64
                          12.2-STABLE
                          FreeBSD 12.2-STABLE devel-12-n226623-ba553ae641b5 pfSense
                          
                          Crash report details:
                          
                          PHP Errors:
                          [05-May-2021 14:07:00 Etc/UTC] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/www/wg/vpn_wg_peers_edit.php on line 259
                          
                          
                          
                          No FreeBSD crash data found.
                          
                          V 1 Reply Last reply Reply Quote 0
                          • V
                            vajonam Rebel Alliance @chrisjmuk
                            last edited by

                            @chrisjmuk This has been fixed, will be in the next release.

                            cmcdonaldC 1 Reply Last reply Reply Quote 0
                            • cmcdonaldC
                              cmcdonald Netgate Developer @vajonam
                              last edited by

                              For anyone having issues with Mullad,

                              29f2f625-6720-41a5-a3ae-7f85d699bbb8-image.png

                              Make sure your gateway is the same as your interface address

                              Need help fast? https://www.netgate.com/support

                              C 1 Reply Last reply Reply Quote 0
                              • C
                                chrisjmuk @cmcdonald
                                last edited by

                                @theonemcdonald still no luck unfortuantly on my side. are you able to give me a quick message?

                                V 1 Reply Last reply Reply Quote 0
                                • V
                                  vajonam Rebel Alliance @chrisjmuk
                                  last edited by vajonam

                                  @chrisjmuk I just get got it setup and working fine.

                                  Here is what I did.

                                  • download zip file for the config from mullvad
                                  • create tunnels and peers. (the conf in the zip file contains the tunnel private key, and public key for peer, the pfsense ui will generate the tunnel public key automatically)
                                  • create interface MULL_WG with Interface Address 10.x.x.x/32, create a gateway at the same time for that same IP.
                                  • create outbound NAT, set interface to MULL_WG and source / dest to any

                                  f0bb8adc-e3e9-4cb1-9318-158b7ac6ef1c-image.png

                                  • firewall rules to do policy based routing.
                                  C 1 Reply Last reply Reply Quote 0
                                  • C
                                    chrisjmuk @vajonam
                                    last edited by

                                    @vajonam Thank you, that done the trick - all working now, i will set my self as a regular sponsor for your github.

                                    1 Reply Last reply Reply Quote 1
                                    • V
                                      vjizzle
                                      last edited by

                                      Hi! I setup pfSense 2.6 on my Hyper-V lab and was able to get setup a Wireguard tunnel with TorGuard. Looks promising! I did notice a little more cpu load then I expected when running speedtests but I was able to utilize my 100Mbit internet connection.

                                      WGTUN Interface (opt1, tun_wg0)
                                      Status
                                      up 
                                      IPv4 Address
                                      10.13.XX.XX
                                      Subnet mask IPv4
                                      255.255.255.0 
                                      Gateway IPv4
                                      10.13.XX.XX
                                      MTU
                                      1500 
                                      In/out packets
                                      509239/443583 (536.63 MiB/360.12 MiB) 
                                      In/out packets (pass)
                                      509239/443583 (536.63 MiB/360.12 MiB) 
                                      In/out packets (block)
                                      0/0 (0 B/0 B) 
                                      In/out errors
                                      0/0 
                                      Collisions
                                      0
                                      

                                      wg01.png

                                      cmcdonaldC C 2 Replies Last reply Reply Quote 1
                                      • cmcdonaldC
                                        cmcdonald Netgate Developer @vjizzle
                                        last edited by cmcdonald

                                        @vjizzle There is still optimization gains to be realized yet in the kernel module...primarily around the crypto. We will track all ongoing development on all fronts to keep this fresh and current. Stay tuned

                                        Need help fast? https://www.netgate.com/support

                                        E 1 Reply Last reply Reply Quote 1
                                        • E
                                          emikaadeo @cmcdonald
                                          last edited by emikaadeo

                                          @theonemcdonald Hi! Just to clarify, will this be available in pfSense 2.5.1 Package Manager ?

                                          JeGrJ C 2 Replies Last reply Reply Quote 0
                                          • JeGrJ
                                            JeGr LAYER 8 Moderator @emikaadeo
                                            last edited by

                                            @emikaadeo said in WireGuard lives!:

                                            @theonemcdonald Hi! Just to clarify, will this be available in pfSense 2.5.1 Package Manager ?

                                            Not currently as it's not recommended for stable. So if you want to run it on 2.5.x, download the packages from GitHub and install it manually.

                                            Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                                            If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                                            1 Reply Last reply Reply Quote 2
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.