wireguard-kmod VS udm-le

I currently have site to site set up and working using kmod-wireguard on the UDMP, (https://github.com/tusc/wireguard-kmod) and a netgear running DDWRT on its native wireguard client.

https://github.com/tusc/wireguard-kmod maybe this can help? I’m not certain though

Just make sure you use the latest github release, instead of the one in the article since it was written in December 2021, so replace the link with the latest from: https://github.com/tusc/wireguard-kmod/releases

wireguard has been avaliable for quite a while. Check it out here. Also if you are inclined there is a redditor by the named u/peacey that developed split-vpn. Which is pretty cool. Although not official it works great imo.

Ah, you too have a UDM. I don't know if you knew it was an option, but if you already have the udm-utilities boot loader set up ( https://github.com/boostchicken-dev/udm-utilities) , there is a kernel level wireguard model that you can install right into the udm. ( https://github.com/tusc/wireguard-kmod)

If you don't shy away from the CLI and know basic Linux networking, you can easily set up wireguard or openvpn on the UDMP, and even push traffic via VPN gateway selectively per client or VLAN.

I’m already using udm-le installed through SSH to take advantage of Let’s Encrypt and it is configured with Cloudflare (it is the only modification through SSH I did).

I had it working flawlessly with https://github.com/unifi-utilities/unifios-utilities/tree/main/on-boot-script and https://github.com/kchristensen/udm-le

Github repo for the tooling that I am using (not my repo) https://github.com/kchristensen/udm-le

I had been using an LE SSL certificate on my UDM-Pro via UDM-LE. However, this replaced the self signed certificate with the LE certificate, which appears to break the Protect app on mobile devices.