Community discussions

 
mkx
Forum Guru
Forum Guru
Posts: 1949
Joined: Thu Mar 03, 2016 10:23 pm

Re: [Feature request] Wireguard

Thu Feb 07, 2019 4:05 pm

Too bad ROS 7 doesn't support DKMS kernel modules :(
BR,
Metod
 
pe1chl
Forum Guru
Forum Guru
Posts: 5093
Joined: Mon Jun 08, 2015 12:09 pm

Re: [Feature request] Wireguard

Thu Feb 07, 2019 4:19 pm

Wireguard does not need to be in the kernel, it can be implemented in a user process.
 
Kaeltis
just joined
Posts: 13
Joined: Fri Sep 14, 2018 1:03 am

Re: [Feature request] Wireguard

Mon Feb 11, 2019 8:23 pm

Would love to see official wireguard support as well.
 
Quasar
just joined
Posts: 17
Joined: Sun Oct 05, 2014 1:11 pm

Re: [Feature request] Wireguard

Mon Feb 11, 2019 8:33 pm

By the time we get v7 it'll be merged ;)
Wireguard does not need to be in the kernel, it can be implemented in a user process.
One of the selling points is performance. Especially on embedded devices userspace is not okay.
 
User avatar
nz_monkey
Forum Guru
Forum Guru
Posts: 1803
Joined: Mon Jan 14, 2008 1:53 pm
Location: Straya
Contact:

Re: [Feature request] Wireguard

Tue Feb 12, 2019 10:05 pm


One of the selling points is performance. Especially on embedded devices userspace is not okay.
Most high performance packet forwarding is done in user space!

Check out VPP, DPDK and OFP
http://thebrotherswisp.com/ | Mikrotik MTCNA, MTCRE, MTCINE | Fortinet FTCNA, FCNSP, FCT | Extreme Networks ENA
 
Quasar
just joined
Posts: 17
Joined: Sun Oct 05, 2014 1:11 pm

Re: [Feature request] Wireguard

Sat Feb 16, 2019 7:47 pm


One of the selling points is performance. Especially on embedded devices userspace is not okay.
Most high performance packet forwarding is done in user space!

Check out VPP, DPDK and OFP
Well, that's cheating in the sense that it's accompanied by drivers allowing you to bypass the kernel stack and write a tailored userspace processing application.

It doesn't hold for a naive userspace application (such as the Golang Wireguard implementation). I'm sure you could make it fly in userspace using DPDK, but that's besides the point ;)
 
Kampfwurst
newbie
Posts: 47
Joined: Mon Mar 24, 2014 2:53 pm

Re: [Feature request] Wireguard

Thu Feb 21, 2019 1:00 pm

+1 from my side
 
marcrisse
just joined
Posts: 20
Joined: Tue Feb 16, 2016 9:16 pm
Location: Germany

Re: [Feature request] Wireguard

Fri Mar 08, 2019 1:08 pm

+1 from me

I hate running Linux-VMs behind all my Mikrotik-Devices only for WG!
 
User avatar
Anastasia
newbie
Posts: 32
Joined: Wed Oct 28, 2015 7:12 pm

Re: [Feature request] Wireguard

Mon Mar 11, 2019 9:10 pm

+1
it will soon be added to the linux kernel and it will become the VPN standard
 
mms101
just joined
Posts: 10
Joined: Fri Apr 07, 2017 5:45 pm

Re: [Feature request] Wireguard

Tue Mar 12, 2019 11:35 pm

+1 from me.
 
limaunion
just joined
Posts: 15
Joined: Sun Sep 03, 2017 5:51 pm

Re: [Feature request] Wireguard

Thu Mar 28, 2019 12:50 pm

++1
 
User avatar
BG4DRL
just joined
Posts: 7
Joined: Sat Jan 26, 2019 4:00 pm

Re: [Feature request] Wireguard

Tue Apr 02, 2019 7:28 pm

+1
Waiting
 
pe1chl
Forum Guru
Forum Guru
Posts: 5093
Joined: Mon Jun 08, 2015 12:09 pm

Re: [Feature request] Wireguard

Wed Apr 03, 2019 12:10 pm

+1
Waiting
I don't recommend that! Users requesting updates in OpenVPN have been waiting for over 5 years already...
 
Sob
Forum Guru
Forum Guru
Posts: 3853
Joined: Mon Apr 20, 2009 9:11 pm

Re: [Feature request] Wireguard

Wed Apr 03, 2019 5:55 pm

So what's the best plan? Pleas, prayers, bribes, threats, ...? :)
 
pe1chl
Forum Guru
Forum Guru
Posts: 5093
Joined: Mon Jun 08, 2015 12:09 pm

Re: [Feature request] Wireguard

Wed Apr 03, 2019 11:20 pm

So what's the best plan? Pleas, prayers, bribes, threats, ...? :)
A Raspberry Pi or similar to handle the features you wish to be in RouterOS but never appear...
 
Paternot
Long time Member
Long time Member
Posts: 532
Joined: Thu Jun 02, 2016 4:01 am
Location: Niterói / Brazil

Re: [Feature request] Wireguard

Thu Apr 04, 2019 12:58 am

So what's the best plan? Pleas, prayers, bribes, threats, ...? :)
A Raspberry Pi or similar to handle the features you wish to be in RouterOS but never appear...
That's quite cumbersome. Maybe a short term solution - but complaining is a long term solution. How can Mikrotik knows what we want, if no one speaks?

True, they don't always implement it. But we try. :D
 
pe1chl
Forum Guru
Forum Guru
Posts: 5093
Joined: Mon Jun 08, 2015 12:09 pm

Re: [Feature request] Wireguard

Thu Apr 04, 2019 12:00 pm

They should implement the feature to allow user processes to run on a router in a chroot jail under nonprivileged
router, with only network interfaces imported via sockets (tun/tap or listening sockets for specific ports), similar
to the concept of MetaROUTER found on old models, but much lighter (just a user process instead of full virtualisation).
This allows third parties to add functionality that the company itself does not have resources to develop, like a better
OpenVPN and also a user-mode implementation of Wireguard (which will of course work just fine, don't believe those that
claim it can only be done in the kernel!)
Also other things, like a full-featured DNS server, a webserver, and other things we have been asking about for many
years but that never arrive.
There is no need to open up RouterOS for this, and should it expose security problems that is only good because those
would have bitten us sometime anyway.
 
reinerotto
Member
Member
Posts: 418
Joined: Thu Dec 04, 2008 2:35 am

Re: [Feature request] Wireguard

Sun Apr 07, 2019 11:33 pm

Why so complicated ?
Use MT for "plain and simple" routing/networking.
And an openwrt-box for the missing functions, like wireguard, squid proxy, nginx web server etc.
Or, just use openwrt devices for routing/networking, too.
 
Sob
Forum Guru
Forum Guru
Posts: 3853
Joined: Mon Apr 20, 2009 9:11 pm

Re: [Feature request] Wireguard

Mon Apr 08, 2019 5:21 am

It depends. If you're big business, then get routers for routing and dedicated servers for other stuff. It's the right way, and costs (both for buying all devices and taking care of them) won't be a problem for you. If you're extreme hobbyist, then get your 10+ different devices, create all kinds of servers and have great fun with them.

But anyone in betweeen (SOHO, etc) wants one device for all basic stuff. Full-blown Linux distribution (OpenWrt also qualifies) is one possible way, there are no limits what you can do with that, but it's also too complicated for most. RouterOS (and mainly WinBox) found the perfect spot. It gives you less freedom compared to Linux, but it's as friedly as it can be, while still remaining powerful enough. It's just awesome.

Unfortunately, sometimes it's not enough, and you may want a little bit more. But if RouterOS device provides >90% of what you need, getting another device for the rest is something you'd rather avoid. Realistically, MikroTik can't add all possible features, that's clear. There is/was MetaRouter, but it seems like a dead end now. And it was too heavy anyway. Something lighter as suggested by @pe1chl (and I suggested it in the past too) could be the solution that could make most people happy.

My only fear is that it could enable MikroTik to become "lazy" and refuse to implement some features, because "hey, we don't want to bother, when there's already a third-party package for that", even though it can be some half-working thing. I'd really like to have something like this as a way how to add some really exotic stuff that MikroTik would never add. But things like Wireguard should eventually be directly in RouterOS and supported by MikroTik.
 
robertpenz
Frequent Visitor
Frequent Visitor
Posts: 80
Joined: Mon Oct 10, 2011 8:41 am

Re: [Feature request] Wireguard

Wed Apr 10, 2019 8:44 pm

We did some performance Tests with Wireguard and man it is faster than any other VPN with much less CPU load! And for Android Phones the battery is not used more than without VPN, which is not true for all other VPNs - It makes a VPN almost transparent performance wise. Please implement!!

Who is online

Users browsing this forum: No registered users and 29 guests