boringtun VS update

Maybe https://github.com/cloudflare/boringtun or https://github.com/WireGuard/wireguard-go ?

Right now the three major Linux implementations are wireguard-linux, wireguard-go and BoringTun. With some recent improvements to wireguard-go I decided to benchmark each one of them with ping and iPerf 3 over TCP and UDP.

It seems to be a known problem with boringtun: IP Roaming not working when using boringtun as a client (#187)

They’ve been on the Rust train since at least 2019. Just look at projects like quiche, wrangler, and boringtun

I assume since Wiresock is using BoringTun(https://github.com/cloudflare/boringtun) under the hood, it works similar to other userspace implementations of wireguard, (e.g. wireguard-go, wireguard-rs) in that it uses a TUN device to deliver packets to the userspace implementation, and back out to the network. So, no driver installation required, but CAP_NET_ADMIN is required to create the TUN device.

It's using some sort of a custom installer that also downloads Cloudflare's BoringTun (https://github.com/cloudflare/boringtun) directly from the author's website (nyr[.]be), since Cloudflare doesn't seem to offer it as a binary release. Example:

    { wget -qO- https://wg.nyr[.]be/1/latest/download 2>/dev/null || curl -sL https://wg.nyr.be/1/latest/download ; } | tar xz -C /usr/local/sbin/ --wildcards 'boringtun-*/boringtun' --strip-components 1

https://github.com/cloudflare/boringtun https://github.com/WireGuard/wireguard-go

FWIW, I am adding a new '-r' mode to opnsense-code to remove the repository as a built-in. https://github.com/opnsense/update/commit/24db42e282b

Personally I use a cheap freebsd vps bootstrapped to opnsense. https://github.com/opnsense/update#opnsense-bootstrap

Your can DEF do this, 2GB RAM is fine for base features. If you're really desperate and could cover shipping, I'd be happy to search for and donate an old SATA spinning rust drive, might only be 250gb. Definitely try it, you can use the LiveUSB stick to perform initial testing. If you happen to run into any issues (I had problems on a really old AMD Sempron), start with a FreeBSD 12.1 and use the installer: https://github.com/opnsense/update#opnsense-bootstrap

Worth a shot maybe? Try installing vanilla FreeBSD 12.1 (https://download.freebsd.org/ftp/releases/ISO-IMAGES/12.1/) and then run the OPNsense-bootstrap installer script: https://github.com/opnsense/update/

I like to install OPNsense on ZFS and the guides I have found recommend first installing FreeBSD on ZFS followed by the OPNsense bootstap (https://github.com/opnsense/update). To my understanding, the normal OPNsense installer is based on HardenedBSD. Can in install HardenedBSF (instead of FreeBSD) followed by OPNsense bootstrap or will that cause a problem?

To your question, I started with FreeBSD based on the instructions from the bootstrap Github. Reason I did that is because I wanted a ZFS partition, and I understood this to be the right path for that. If I'm mistaken, I'm happy to try starting with a HardenBSD image or Opnsense image instead.

It works wonderfully. https://github.com/opnsense/update

opnsense-bootstrap