pfSense 软件 + WireGuard 包 – 项目报告 011



时间戳: 0:00 频道新闻和方向 1:03 介绍和社区邀请 2:27 pfSense 项目新闻 4:50 pfSense Plus 21.09 7:28 ZFS 和 UI 演示 14:54 磁盘使用小部件演示 21:58 IPsec 改进 23:10缓存、缓存、缓存 29:05 WireGuard 开发概述 34:18 为什么要打包 39:00 WireGuard 文档更新 40:10 WireGuard 更新 42:05 社区贡献 43:26 WireGuard 握手错误 45:43 良好错误报告的标志 47:21更多社区贡献 51:59 总结链接:即将发布的版本说明:https://docs.netgate.com/pfsense/en/latest/releases/22-01.html WireGuard 文档:https://docs.netgate.com /pfsense/en/latest/vpn/wireguard/index.html 讨论:Facebook:https://www.facebook.com/groups/pfsense.official/ Reddit:https://reddit.com/r/PFSENSE 和 https: //reddit.com/r/netgate 论坛:https://forum.netgate.com/。

19 comments
  1. Hi Christian, I love that you have been helping develop PfSense features for the community. I have just two questions (and I am not sure if you may or may not know the answers), my first question is, do you happen to know when PfSense Plus might be released for those of us that have our own hardware at home? I know it's probably still being developed but if you maybe have a small tidbit of timing information on it, that would be very beneficial. My second question is, given that you have been able to develop some of these new widgets for the dashboard, I was wondering how hard it would be to make a new widget for live digit based WAN speed. We obviously have the traffic graphs, but those are just graphs until you scroll over them for digit based speed (however this is not live). I know the system already has WAN speed in the Status > Traffic Graphs page. Would it be possible for us to get a widget on the dashboard to show that digit based speed that could refresh once per second? (Or a customizable polling number) I know that back in the day, before the big UI rewrite, there was this functionality in the current traffic graphs widget on the dashboard but then it went away. Being able to see at a glance just a digit based number would be very helpful for monitoring speed. Is this something you might be able to pass along to the team or develop by yourself as a side project? I feel I am probably not the only one that would like this type of granular insight on the dashboard for speed but I haven't seen much about it. Thanks for all that you are doing man! Can't wait to use ZFS once it comes to PfSense Plus (and on 3rd party hardware when available)

  2. Thanks for the shoutout and kind words. Just trying to do my part to make sure the WG implementation on pfSense (and FreeBSD distro in general) can run as smoothly as possible 🙂

    I tested for the handshaking issue on 0.1.5_2 and it seems to be resolved with the upstream kernel module fix that was included. Redmine bug report has been updated with my findings. Thanks for keeping on this one, it is really appreciated!

  3. "The WireGuard service is not running." after update to 0.1.5_2. I try to start WG, but "The WireGuard service is not running." Again. Please help. Thank you

  4. Christian, Hi. There are tons of improvements are needed in pfSense starting with UI optimization. Menu's all across needs to be classified logically. Web filtering needs to be improved a lot. Currently you can not make aliases based on mac addresses [ where as opnsense can do this. ] . You can not create policies [ Similar to Sophos ] . kvm-guest-tools package is not available [ requires for virtulisation ] . Hope you will look into long required features / issues.

    But I must admit pfSense is THE best.

  5. Update 2: WireGuard Package 0.1.5_3 will be built tonight for all branches, including stable CE 2.5.2 and Plus 21.05.2.

    Update: WireGuard Package 0.1.5_2 is now available. We will let it incubate in devel for a week or so before updating the package in the latest stable branches. As always, let us know if you run into any questions

    Correction: For those of you running the development snapshots for either pfSense Plus or CE, expect to find an update to the WireGuard package available starting tomorrow (11/5). This update includes a few patches to the kernel module, which will hopefully fix the handshaking issue that I talked about starting at 43:26. The package version to look for is 0.1.5_2 and the kernel module is version 0.0.20210606_2. These are queued up and will be built later tonight as part of our normal build process. This update only impacts the handshake bug.

  6. I'm a small fry. Use pfsense with wireguard for my vpn.ac connection for my home on an old spare pc with nice nics. Pc is so old that I gotta replace the cmos battery next time I schedule downtime. I may not understand the underlying code but love that you explain it so that I can follow along! Great vid. Appreciate the tree gui thingy. Kudos

  7. It’d be good if you say something about bugs reported and bugs fixed. In particular we discussed the annoying issue that WG blocked all network on iPhones after some time in use. Was it reproduced or fixed? Thx

  8. The new/improved widgets are slick. There are many places in the UI that can benefit from a streamlined implementation of treegrid. I also suspect the monitoring page is due for review. 22.01 is shaping up to be a golden release! Regarding the video in general, I sit through all of the rambling, but I would certainly welcome less of it lol. Regardless, thanks for continuing the progress videos.

  9. If I remember right, the WG package used to leave configuration change save points in "Backup and restore" when you bring the interface up. I think it was something to do with the DNS Resolver binding to the WG interface. Will that always have to remain that way as a package? Cheers.

Comments are closed.