WireGuard is an extremely simple yet fast and modern VPN that utilizes
state-of-the-art cryptography. It aims to be faster, simpler, leaner, and
more useful than IPSec, while avoiding the massive headache. It intends to
be considerably more performant than OpenVPN. WireGuard is designed as a
general purpose VPN for running on embedded interfaces and super computers
alike, fit for many different circumstances.
This package does not contain anything by itself - it is a "meta-port" that
depends on other wireguard packages.
For FreeBSD < 12.1 only the userland implementation wireguard-go is
available.
For FreeBSD >= 12.1 we default to use the kernel module if_wg(4).
If you experience problems with it you can switch back to wireguard-go
by removing net/wireguard-kmod and making sure net/wireguard-go is
installed.
The userland tools wg-quick(8) and wg(8) try to use kernel support if
the kernel module is available and otherwise fall back to wireguard-go
automatically. Config files are fully compatible.
Reason:
A wireguard kernel implementation supporting FreeBSD 12.1 and newer was
added as net/wireguard-kmod recently.
The new default for users of net/wireguard is the kernel module.
If you experience problems with it you can switch back to wireguard-go
by removing net/wireguard-kmod and making sure net/wireguard-go is
installed.
The userland tools wg-quick(8) and wg(8) try to use kernel support if
the kernel module is available and otherwise fall back to wireguard-go
automatically. Config files are fully compatible.
Port Moves
port deleted on 2023-12-31 REASON: Has expired: Only useful for FreeBSD 12 which is EoL soon
net/wireguard: Mark DEPRECATED
This metaport was only useful when we had multiple wireguard ports in
the portstree. With the deprecation of net/wireguard-kmod this metaport
is also not needed anymore.
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
WireGuard is an extremely simple yet fast and modern VPN that utilizes
state-of-the-art cryptography. It aims to be faster, simpler, leaner, and
more useful than IPSec, while avoiding the massive headache. It intends to
be considerably more performant than OpenVPN. WireGuard is designed as a
general purpose VPN for running on embedded interfaces and super computers
alike, fit for many different circumstances.
This package does not contain anything by itself - it is a "meta-port" that
depends on other wireguard packages.
WWW: https://www.wireguard.com
net/wireguard: Update to 1.0.20210315 and drop BASHCOMPLETION option
BASHCOMOPLETION option was dropped but we install shell completion files
unconditionally to follow porters handbook.
This is the first wireguard-tools version that supports FreeBSD's kernel
implementation. It is compatible with if_wg in FreeBSD 14-CURRENT which
will likely be backported in the future but incompatible with the if_wg
code that was present in stable/13 up to 13.0-RC3.
net/wireguard: Update to 1.0.20210223 and introduce options
Due to a bug which was fixed in this release both net/wireguard
and net/wireguard-go need to be updated or wg-quick will hang at
the next start.
PR: 253537
net/wireguard: Implement reload command in rc.d script to reload all peer
and key settings without restarting the daemon to avoid interface up/down
and loosing traffic. This does not work if you change the Address= line in
the [Interface] section which needs a real restart.
PR: 244862
Submitted by: david@isnic.is
net/wireguard: Introduce general wireguard_env parameter for environment
variables which affect wg-quick or the userspace implementation (eg.
wireguard-go). The syntax in rc.conf is:
wireguard_env="VAR=val VAR2=val2"
As a reference wg-quick uses these environment variables
WG_QUICK_USERSPACE_IMPLEMENTATION
and wireguard-go
LOG_LEVEL
WG_TUN_FD
WG_UAPI_FD
WG_PROCESS_FOREGROUND
Submitted by: J.R. Oldroyd <fbsd@opal.com>
net/wireguard: Update to 1.0.20191226 and switch to the new wireguard-tools
repository
Reported by: Jason A. Donenfeld <jason@wireguard.com> (per email)
net/wireguard: Update rc.d script to let the user define which wg interfaces to
manage
Most people will likely want to put wireguard_interfaces="wg0" in /etc/rc.conf
Reported by: Jason A. Donenfeld <Jason@zx2c4.com>
WireGuard is an extremely simple yet fast and modern VPN that utilizes
state-of-the-art cryptography. It aims to be faster, simpler, leaner,
and more useful than IPSec, while avoiding the massive headache. It
intends to be considerably more performant than OpenVPN. WireGuard is
designed as a general purpose VPN for running on embedded interfaces and
super computers alike, fit for many different circumstances.
WWW: https://www.wireguard.com
