In-kernel WireGuard is on its way to FreeBSD and the pfSense router

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by kevans91 on Tuesday March 16, 2021 @02:43PM (#26481041)

Note that there's additional follow-up available here: https://lists.freebsd.org/pipermail/freebsd-hackers/2021-Mar...

[ Parent | on HN ]

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by ksec on Wednesday March 17, 2021 @12:44AM (#26486635)

Absolutely the best outcome. BSDs has always been ( to me at least ) about getting things right, take time to get it baked before committing. The old, out of fashion style of getting things done properly and not shipping for the sake of it. Which is both a good thing and a bad thing in the modern world. But it is a trade off.

I also hope FreeBSD sort of look into why it was committed in the first place.

Hopefully this also set the tone for Scott and Netgate. Even having mild scepticism of the one sided bash to them on HN had me downvoted into oblivion.

[ Parent | on HN ]

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by loeg on Wednesday March 17, 2021 @12:08PM (#26493107)

> I also hope FreeBSD sort of look into why it was committed in the first place.

It is a widely desired feature that no one else was working on and unfortunately, did not see adequate review. FreeBSD largely trusts committers to seek out review and submit quality code. There are certainly downsides to this model, sometimes more impactful than others. Unfortunately, FreeBSD does not have the large body of employer-paid maintainers Linux has available to thoroughly code review every patch that lands.

[ Parent | on HN ]

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by darkwater on Tuesday March 16, 2021 @04:40PM (#26482622)

Came here to post that, looks like they are pulling out the recent effort

EDIT: removed the "and revert to the original freebsd (broken?) implementation"

[ Parent | on HN ]

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by cperciva on Tuesday March 16, 2021 @05:05PM (#26482961)

WireGuard is gone from the kernel in 13.0-RELEASE. Given the choice between "buggy" and "less than a week old", we're going with the third option of "you can ship a kernel module via the ports tree".

[ Parent | on HN ]

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by zx2c4 on Tuesday March 16, 2021 @05:11PM (#26483034)

Which is really the absolute best outcome:

https://lists.freebsd.org/pipermail/freebsd-hackers/2021-Mar...

[ Parent | on HN ]

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by beatrobot on Tuesday March 16, 2021 @05:18PM (#26483108)

They are removing both implementations(the new and the broken one) in order to put more work and review on the new one, and release it properly at a later time.

[ Parent | on HN ]