Jump to content


Photo

Request for WireGuard VPN implementation

WireGuard VPN

  • Please log in to reply
100 replies to this topic

Re: Request for WireGuard VPN implementation #81 betacentauri

  • PLi® Core member
  • 6,963 posts

+299
Excellent

Posted 11 December 2020 - 15:43

m stands for module. This is ok. And the build process should build a module, but it doesn't. We don't know at the moment why.


Xtrend ET-9200, ET-8000, ET-10000, OpenPliPC on Ubuntu 12.04

Re: Request for WireGuard VPN implementation #82 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 11 December 2020 - 15:45

building as a module is fine.

 

If you compare, https://github.com/z.../defconfig#L657 is the same kernel version and the same defconfig, and this one builds fine.

 

And according to https://cateee.net/l...UDP_TUNNEL.html, it does not have any dependencies (other config values that need setting too).


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #83 ReceiverM

  • Member
  • 14 posts

0
Neutral

Posted 11 December 2020 - 16:13

I have no clue about Kernelstuff, but trying to help anyway:

While playing around I stumbled over an error about something like ..XT..Haslimit.. as warning I thought.

But could it depend on CONFIG_NETFILTER_XT_MATCH_HASHLIMIT which is not set?

 

 

 

Btw. I am reaching my daily post limit of 5 with this one, can you increment that? :)

 

 

 

\\EDIT:

 

root@multibox:~# modprobe udp_tunnel
modprobe: FATAL: Module udp_tunnel not found in directory /lib/modules/4.4.35

 


Edited by ReceiverM, 11 December 2020 - 16:14.


Re: Request for WireGuard VPN implementation #84 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 11 December 2020 - 16:41

I've checked, the Octagon BSP has

./recipes-linux/linux-octagon-4.4.35/sf8008/defconfig:# CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set
./recipes-linux/linux-octagon-4.4.35/sf8008m/defconfig:# CONFIG_NETFILTER_XT_MATCH_HASHLIMIT is not set

but for those boxes the driver is build without problems.


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #85 ReceiverM

  • Member
  • 14 posts

0
Neutral

Posted 11 December 2020 - 16:44

Just to be sure, do we know that it is working on sf8008?

 

Is there anything I can help you with?


Edited by ReceiverM, 11 December 2020 - 16:46.


Re: Request for WireGuard VPN implementation #86 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 11 December 2020 - 16:58

Looking at it with two people at the moment. It might be related to CONFIG_NET_FOU.


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #87 ReceiverM

  • Member
  • 14 posts

0
Neutral

Posted 12 December 2020 - 20:39

Its all about the wireguard kernel thing (btw. any news?).

 

I realised that it is not possible to activate/onfigure iptables.

iptables v1.8.3 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

 

I am sure that these things are two separated problems, but I cant even get iptables to work.



Re: Request for WireGuard VPN implementation #88 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 12 December 2020 - 22:04

Half the BSP's have already been updated (and indeed, with CONFIG_NET_FOU the missing driver builds). For the others PR's have been send to the vendors.

 

As to iptables: did you install the required modules? Or only the iptables binary?


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #89 Erik Slagter

  • PLi® Core member
  • 46,681 posts

+534
Excellent

Posted 13 December 2020 - 10:55

The above message means you are referring to a table (adding...?) that doesn't yet exists. It doesn't have to mean iptables doesn't run.


* Wavefrontier T90 with 28E/23E/19E/13E/9E/4.8E/0.8W/5W via SCR switches 2 x 2 x 6 user bands
* Ziggo digital cable TV (FTA)
I don't read PM -> if you have something to ask or to report, do it in the forum so others can benefit. I don't take freelance jobs.
Ik lees geen PM -> als je iets te vragen of te melden hebt, doe het op het forum, zodat anderen er ook wat aan hebben.

Re: Request for WireGuard VPN implementation #90 ReceiverM

  • Member
  • 14 posts

0
Neutral

Posted 14 December 2020 - 11:09

Thank you very much for your efforts!
Then hopefully I do not have to wait too long until I have a working wireguard :)

I have created a separate topic for the iptables problem that it stays tidy in here.



Re: Request for WireGuard VPN implementation #91 tuxid

  • New Member
  • 2 posts

0
Neutral

Posted 5 April 2021 - 08:28

Hi guys, I just tried to install wireguard in one vu+ zero but no luck :( version Openpli 8

 

Details:

root@vuzero:~# opkg find wire*
wireguard-tools - 1.0.20200319-r0.0
wireguard-tools-bash-completion - 1.0.20200319-r0.0
wireguard-tools-dbg - 1.0.20200319-r0.0
wireguard-tools-dev - 1.0.20200319-r0.0
wireguard-tools-doc - 1.0.20200319-r0.0
wireless-regdb - 2020.04.29-r0.0
wireless-regdb-static - 2020.04.29-r0.0
wireless-tools - 1:30.pre9-r0.0
wireless-tools-dbg - 1:30.pre9-r0.0
wireless-tools-doc - 1:30.pre9-r0.0
root@vuzero:~# opkg install wireguard-tools

Collected errors:
 * Solver encountered 1 problem(s):
 * Problem 1/1:
 *   - nothing provides kernel-module-wireguard needed by wireguard-tools-1.0.20200319-r0.0.mips32el
 *
 * Solution 1:
 *   - do not ask to install a package providing wireguard-tools

Edited by tuxid, 5 April 2021 - 08:30.


Re: Request for WireGuard VPN implementation #92 Tech

  • Forum Moderator
    PLi® Core member
  • 32,714 posts

+352
Excellent

Posted 5 April 2021 - 10:21

I think that module is not provided by the kernel, I can't find the module in de vuzero kernel config.


Aan de rand van de afgrond is een stap voorwaarts niet altijd vooruitgang....

Re: Request for WireGuard VPN implementation #93 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 5 April 2021 - 13:59

No, there are several BSP's which are missing the required drivers, it's still on my todo list.


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #94 tuxid

  • New Member
  • 2 posts

0
Neutral

Posted 6 April 2021 - 09:20

thx for the replies, that means the rel. 8 will eventually have the kernel modules in one of the future minor releases ?



Re: Request for WireGuard VPN implementation #95 AllMassive

  • Member
  • 8 posts

0
Neutral

Posted 11 May 2021 - 07:55

installed openpli-8.0-release-vuzero-20210510_usb.zip on a zero v2 and tried to install wireguard afterwards.

root@vuzero:~# opkg list | grep wireguard
wireguard-tools - 1.0.20200319-r0.0 - WireGuard is an extremely simple yet fast and modern VPN
wireguard-tools-bash-completion - 1.0.20200319-r0.0 - WireGuard is an extremely simple yet fast and modern VPN
wireguard-tools-dbg - 1.0.20200319-r0.0 - WireGuard is an extremely simple yet fast and modern VPN - Debugging files
wireguard-tools-dev - 1.0.20200319-r0.0 - WireGuard is an extremely simple yet fast and modern VPN - Development files
wireguard-tools-doc - 1.0.20200319-r0.0 - WireGuard is an extremely simple yet fast and modern VPN - Documentation files
root@vuzero:~# opkg install wireguard-tools

Collected errors:
 * Solver encountered 1 problem(s):
 * Problem 1/1:
 *   - nothing provides kernel-module-wireguard needed by wireguard-tools-1.0.20200319-r0.0.mips32el
 * 
 * Solution 1:
 *   - do not ask to install a package providing wireguard-tools


root@vuzero:~# opkg install kernel-module-wireguard
No packages installed or removed.

should this normally work?


Edited by AllMassive, 11 May 2021 - 07:55.


Re: Request for WireGuard VPN implementation #96 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 11 May 2021 - 13:33

No, at the moment there are models where it don't work because some kernel drivers are missing.

 

The vendor (VU+ in this case) needs to update their kernel defconfig for that (we don't have access to that), and I haven't had time to prepare it for all vendors.


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #97 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 12 May 2021 - 17:11

I've double checked: wireguard requires at least linux kernel version 3.14, and the first generation VU+ boxes use either 3.9 or 3.13, so it is not going to work on a VU Zero.

 

The tools are there because they are generically build for all MIPS32EL boxes, even those with old kernels. I've disabled the generic build for now to avoid this confusion.


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #98 dolphs

  • Senior Member
  • 861 posts

+8
Neutral

Posted 8 June 2021 - 12:41

gave it a go on 7.3 ( h7 ) but alas, suppose either 7.3 or for Zgemma this is still WIP:

root@h7:/etc/wireguard# wg-quick up wg0
/usr/bin/wg-quick: line 46: stat: command not found
/usr/bin/wg-quick: line 46: stat: command not found
/usr/bin/wg-quick: line 46: ((: ( &  & 0007) == 0: syntax error: operand expected (error token is "&  & 0007) == 0")
Warning: `/etc/wireguard/wg0.conf' is world accessible
[#] ip link add wg0 type wireguard
ip: RTNETLINK answers: Operation not supported
Unable to access interface: Protocol not supported
[#] ip link delete dev wg0
ip: can't find device 'wg0'
 
On my Vu+ Uno 4K ( OpenPli8 ) little more luck , but not there yet
 
root@vuuno4k:/etc/wireguard# wg-quick up wg0

[#] ip link add wg0 type wireguard
[#] wg setconf wg0 /dev/fd/63
[#] ip link set mtu 1420 up dev wg0
[#] iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables                                                                                                  -t nat -A POSTROUTING -o eth0 -j MASQUERADE;
modprobe: FATAL: Module ip_tables not found in directory /lib/modules/3.14.28-1.12
iptables v1.8.3 (legacy): can't initialize iptables table `filter': Table does not exist                                                                                                  (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[#] ip link delete dev wg0
 

Edited by dolphs, 8 June 2021 - 12:50.


Re: Request for WireGuard VPN implementation #99 WanWizard

  • PLi® Core member
  • 58,391 posts

+1,273
Excellent

Posted 8 June 2021 - 12:42

Afaik all BSP's have been updated, so in the develop image it should work.


Currently in use: VU+Duo 4K (2xFBC S2), Amiko Viper T2C (T2+fallback), Octagon SF8008 (S2+T2), Zgemma H9.2H (T2+fallback)

Many answers to your question can be found in our new and improved wiki.

Because to health reasons, I will not be active online very often anymore.


Re: Request for WireGuard VPN implementation #100 dolphs

  • Senior Member
  • 861 posts

+8
Neutral

Posted 8 June 2021 - 12:53

ah ok , jsut wanted to add: Vu+ is it not quite there yet so I will await little more so it arrived in the "stable" builds. cheers!

Although we are on kernel 3.14 on Vu+ ... pfff I did not check output properly earlier, so this is a no go until kernel gets upgraded on Vu+ ... 

bummer

root@vuuno4k:/etc/wireguard# wg-quick up wg0
[#] ip link add wg0 type wireguard
[#] wg setconf wg0 /dev/fd/63
[#] ip link set mtu 1420 up dev wg0

[#] iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE;
modprobe: FATAL: Module ip_tables not found in directory /lib/modules/3.14.28-1.12
iptables v1.8.3 (legacy): can't initialize iptables table `filter': Table does not exist                                                                                                  (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[#] ip link delete dev wg0


Edited by dolphs, 8 June 2021 - 12:54.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users