4 ms·
Is there some actual concern about WireGuard itself or just the FreeBSD implementation?
by encryptluks2 6y ago
Is there some actual concern about WireGuard itself or just the FreeBSD implementation?
- jumby 6y agoI think it's just lack of formal peer review [1] [1] https://lists.zx2c4.com/pipermail/wireguard/2021-March/006504.html https://lists.zx2c4.com/pipermail/wireguard/2021-March/00650...
- technofiend 6y agoThere were questions around the implementation. See https://news.ycombinator.com/item?id=26475519 https://news.ycombinator.com/item?id=26475519
- asmr 6y agoApparently the original implementation had issues. Apparently NetGate shipped some bad code after hiring a FreeBSD contributor for their implementation. Kyle Evans has even decided to step away from maintaining wireguard-freebsd. Seems like a mess.
- teruakohatu 6y ago> Kyle Evans has even decided to step away from maintaining wireguard-freebsd That is not true. Everyone acknowledges the code is not up to the required standard so it is being removed but Kyle and others will continue to work on it with the aim of adding it back. Edit: as @asmr below linked to, he has has since announced that he is quitting.
- asmr 6y agohttps://lists.zx2c4.com/pipermail/wireguard/2021-March/006522.html https://lists.zx2c4.com/pipermail/wireguard/2021-March/00652...
- apple4ever 6y agoThat's a real big shame. I know he doesn't blame Netgate, but I will. If it wasn't for their poor attitude (par for the course from Netgate), this would not have blown up.
- deleted 6y ago[deleted]
- tptacek 6y agoTo state this clearly: there are not concerns about WireGuard itself.
- Shish2k 6y agoTo be double-clear - the problems being discussed are in the freebsd kernel-mode implementation. The freebsd userspace implementation is fine, and implementations on other OSes are fine :)