Page 1 of 1

[Suggestion] Support WireGuard

Posted: Tue Aug 29, 2017 7:29 pm
by cypherpunk
WireGuard is a next generation VPN that is experimenting with post-quantum crypto. Mullvad already rolled it out and it's working great. Please consider supporting!

Re: [Suggestion] Support WireGuard

Posted: Fri Sep 01, 2017 8:52 pm
by parityboy
cypherpunk wrote:WireGuard is a next generation VPN that is experimenting with post-quantum crypto. Mullvad already rolled it out and it's working great. Please consider supporting!
I know that staff are already looking at it, especially in relation to how its public key authentication fits within the Cryptostorm model.

Going by Mullvad's blog, it's still in the testing phase. Have you any personal experience of it? What's the performance like?

Re: [Suggestion] Support WireGuard

Posted: Sat Sep 09, 2017 4:29 am
by cypherpunk
I have used it. The performance is really good, moderately better than OpenVPN in that if you have a dynamic IP (e.g. roaming through open wifi or mobile) it reconnects much quicker - no SIGHUPs.

It's also been confirmed working the [linux-libre](https://www.fsfla.org/ikiwiki/selibre/linux-libre/) and the [unofficial-grsec](https://github.com/minipli/linux-unoffi ... c/releases) patches. If you role your own architecture that's a big security plus.

Re: [Suggestion] Support WireGuard

Posted: Tue Sep 12, 2017 6:45 pm
by wireguarduser
also use it with mullvad, way higher speeds than openvpn, had some kernel warning log spam in early version, seems fine now

Re: [Suggestion] Support WireGuard

Posted: Mon Sep 18, 2017 3:23 pm
by df
We do have a test wireguard instance up on a Romanian server, but it's unlikely that we'll provide public access to it anytime soon.

Main reason being, as the wireguard website puts it, "WireGuard is not yet complete. You should not rely on this code."

Re: [Suggestion] Support WireGuard

Posted: Sat Sep 23, 2017 1:09 am
by PrivacyActivist
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

https://www.wireguard.com/#work-in-progress

This isn't ideal from a security point of view and it's only supported on Linux and Mac OS X. I think this project has a bright future, however. It needs to mature before it can be used daily and for important purposes.
-----BEGIN PGP SIGNATURE-----
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=JaNX
-----END PGP SIGNATURE-----

Re: [Suggestion] Support WireGuard

Posted: Wed Dec 20, 2017 11:46 am
by WG_tinkerer
It's bloody lovely. Set up a breeze, low over head (getting around 95% connection speed) and it handles roaming between connections flawlessly.

Makes openvpn feel very clunky indeed!

Re: [Suggestion] Support WireGuard

Posted: Fri Mar 22, 2019 5:53 pm
by Operandi
Any updates on this? It seems that WireGuard may be mainlined soon.

Re: [Suggestion] Support WireGuard

Posted: Tue Apr 02, 2019 8:02 pm
by df
We're working on the interface for it now. Almost done.

Re: [Suggestion] Support WireGuard

Posted: Fri Apr 05, 2019 11:48 pm
by Operandi
df wrote:
Tue Apr 02, 2019 8:02 pm
We're working on the interface for it now. Almost done.
Ah, great.

Re: [Suggestion] Support WireGuard

Posted: Mon Apr 08, 2019 5:08 am
by df
https://cryptostorm.is/wireguard just went live :-D
Be sure to check out https://cryptostorm.is/blog/wireguard-support-added too for info on device limits and whatnot

EDIT:
Like it says on https://cryptostorm.is/wireguard and https://www.wireguard.com/ -
WireGuard is not yet complete. You should not rely on it. It has not undergone proper degrees of security auditing and the protocol is still subject to change.
We've been playing with it since 2016 and it doesn't seem like the protocol is going to change significantly anytime soon, so it should be stable enough to use now.
But keep in mind, it hasn't had any proper audits, so you shouldn't be using it for high security scenarios.
If you just want better speeds for torrenting or whatever, it should be fine for that.

Re: [Suggestion] Support WireGuard

Posted: Wed Apr 10, 2019 6:02 pm
by prospav
Set up on Mac OSX 10.14.4 and using official Wireguard app from apple store, easy set up and works beautifully. Same on IOS 12.2 and apple store app.
Many thanks to CS.

Re: [Suggestion] Support WireGuard

Posted: Fri Apr 12, 2019 1:59 am
by AnonAsPossible
For those of you trying to setup WG In Linux Mint 19.1-tessa-xfce-x64, you'll also need to install the following;

\sudo apt install resolvconf curl

Re: [Suggestion] Support WireGuard

Posted: Fri Apr 12, 2019 3:55 am
by anonymoose
WireGuard is amazing, THANK YOU!!!!

OpenVPN was a nightmare, always disconnecting on UDP and could rarely get TCP to connect (slow when it did!). With UDP Open VPN working I got about 30Mbps, I now get 60Mbps with WireGuard and it's rock solid and so simple !!!