Hacker News Reader

Comment by KenanSulayman | Hacker News Reader

I had been using wireguard-go (macports) on the Mac for a few months now and I'm simply amazed by the performance. Also using it on my phone. Weirdly enough when it's on my connection is more stable, probably because it bypasses the traffic shaping by my ISP through its UDP use.

I couldn't find any information on whether or not this uses wireguard-go internally? Or maybe even the Rust implementation?

p.s. the snow on https://data.zx2c4.com/wireguard-for-macos-screenshots-febru... is pretty hilarious

View on HN

It was a surprise because I’ve been using the same effect in my personal website [1] for several years (since 2003), as an Easter Egg during Christmas season. I got the script from this website (in case anyone is interested) [2]. I also have an Easter Egg for Valentine’s Day [2] which I’m always proud to show to my partner.

[1] https://cixtor.com/?christmas

[2] http://schillmania.com/projects/snowstorm/

[3] https://cixtor.com/?valentine

> Easter Egg during Christmas season

true punk!

Apparently it's using wireguard-go as on iOS.

https://git.zx2c4.com/wireguard-ios/tree/

> p.s. the snow on https://data.zx2c4.com/wireguard-for-macos-screenshots-febru.... is pretty hilarious

Comic Sans MS, we meet again!

(Happy WireGuard user; using the go version on macOS for ages, using wg-quick, using the EdgeOS port on my Ubiquity router, and using the Android userspace version. Roaming simply works. Only thing which sucks is on Android the VPN gets lost when you update the software.)

The is no native XNU kext or bsd module AFAIK, so I guess it must be using the Go implementation underneath.

There is a WIP (Net)BSD wireguard implementation, but that's a long way from something you could just use on MacOS, and the developers are unaffiliated with zx2c4.

https://github.com/ozaki-r/netbsd-src/tree/wireguard

There's also a WIP OpenBSD port in progress. Over the next week or so I've got some plans to try to start working more closely with these developers and make sure the BSD kernel ports are first party supported implementations.

That's great news, thank you.

If you don’t know of any efforts to make this available on FreeBSD, I’m interested in doing so. If you do: I’m willing to help. One end-goal is to subsequently enable pfsense.

A memory safe implementation is probably what you want.

> Also using it on my phone.

How have you set it up on your phone?

EDIT: note I am interested in doing this but I'm on Android, I was under the impression you would need to root the device

https://play.google.com/store/apps/details?id=com.wireguard....

This is the one you need. You only need root if you want to install the (Linux) Kernel Mod for better performance. If this isn't present the app will automatically use the Go (Userspace) implementation.

Although slower than the kernelspace implementation it's still faster and better than OpenVPN.

If you want to install the kernel mod yourself checkout this XDA thread: https://forum.xda-developers.com/android/development/wiregua...

You only need root if you want to run it as a kernel module. Otherwise it will just run in userspace.

Reply on news.ycombinator.com