In-kernel implementation of WireGuard for OpenBSD announced

Company twitter Edge Security, founded by the author of WireGuard, сообщили about building a native and fully supported VPN implementation wire guard under OpenBSD. In confirmation of the words published a screenshot with a demonstration of the work. The availability of patches for the OpenBSD kernel has also been confirmed by Jason A. Donenfeld, the author of WireGuard, in announcement updates to wireguard-tools.

In-kernel implementation of WireGuard for OpenBSD announced

Currently only available external patcheshowever, the authors promise to send their final draft to the OpenBSD developer mailing list soon. The WireGuard code for the OpenBSD kernel is 3322 lines, which is less than the implementation for the Linux kernel. If code with a WireGuard implementation is eventually accepted into the OpenBSD source tree, then it will become the second OS (after Linux) with full and integrated support for WireGuard out of the box. Widespread support for WireGuard is expected in the OpenBSD 6.8 release (in the OpenBSD 6.7 release that was rescheduled from May 1 to May 19, patches do not fall). In the meantime, those wishing to use WireGuard on OpenBSD should use the port net/wireguard-go or manually install the provided patches.

Additionally, you can note the publication of corrective package updates wireguard-tools v1.0.20200510 и wireguard-linux-compat v1.0.20200506, including user-space utilities such as wg and wg-quick, and a layer for compatibility with older Linux kernels (3.10 through 5.5) that do not have built-in WireGuard support. A new release of the wg and wg-quick utilities adds support for interacting with the OpenBSD kernel implementation of WireGuard. It is reported that patches for the OpenBSD kernel are scheduled to be submitted within the next week. To set up a tunnel in OpenBSD, the familiar wg interface and "ifconfig wg0 create" will be used.

Of the changes not related to OpenBSD support, the addition to the wg-quick utility of domains that match the "dns search" mask in resolv.conf stands out. Added support for app whitelisting in addition to blacklisting for Android. Added wg-quick.target service to systemd to restart and control wg-quick. In the wireguard-linux-compat package, the most notable change is to ensure compatibility with future kernel package updates for Ubuntu 19.10 and 18.04-hwe, which are currently in the "proposed" section and not moved to updates.

Source: opennet.ru

Add a comment