5a267f0b8c
We do this after sending the keepalive anyway. This is something of a regression, though, since before we'd cancel and then send, but now we send and then cancel, so it introduces a potential race, but hopefully that isn't too big of a deal. Kernel module commit a24b3e6e15ae1ea1291666e5da910caf43eedbaf |
||
---|---|---|
ratelimiter | ||
rwcancel | ||
tai64n | ||
tests | ||
xchacha20poly1305 | ||
.gitignore | ||
allowedips_rand_test.go | ||
allowedips_test.go | ||
allowedips.go | ||
bind_test.go | ||
build.cmd | ||
conn_default.go | ||
conn_linux.go | ||
conn.go | ||
constants.go | ||
cookie_test.go | ||
cookie.go | ||
COPYING | ||
device_test.go | ||
device.go | ||
endpoint_test.go | ||
generate-vendor.sh | ||
Gopkg.lock | ||
Gopkg.toml | ||
helper_test.go | ||
indextable.go | ||
ip.go | ||
kdf_test.go | ||
keypair.go | ||
logger.go | ||
main.go | ||
Makefile | ||
misc.go | ||
noise_test.go | ||
noise-helpers.go | ||
noise-protocol.go | ||
noise-types.go | ||
peer.go | ||
README.md | ||
receive.go | ||
replay_test.go | ||
replay.go | ||
send.go | ||
timers.go | ||
tun_darwin.go | ||
tun_linux.go | ||
tun_windows.go | ||
tun.go | ||
uapi_darwin.go | ||
uapi_linux.go | ||
uapi_windows.go | ||
uapi.go |
Go Implementation of WireGuard
This is an implementation of WireGuard in Go.
WARNING: This is a work in progress and not ready for prime time, with no official "releases" yet. It is extremely rough around the edges and leaves much to be desired. There are bugs and we are not yet in a position to make claims about its security. Beware.
Usage
Most Linux kernel WireGuard users are used to adding an interface with ip link add wg0 type wireguard
. With wireguard-go, instead simply run:
$ wireguard-go wg0
This will create an interface and fork into the background. To remove the interface, use the usual ip link del wg0
, or if your system does not support removing interfaces directly, you may instead remove the control socket via rm -f /var/run/wireguard/wg0.sock
, which will result in wireguard-go shutting down.
To run wireguard-go without forking to the background, pass -f
or --foreground
:
$ wireguard-go -f wg0
When an interface is running, you may use wg(8)
to configure it, as well as the usual ip(8)
and ifconfig(8)
commands.
To run with more logging you may set the environment variable LOG_LEVEL=debug
.
Platforms
Linux
This will run on Linux; however YOU SHOULD NOT RUN THIS ON LINUX. Instead use the kernel module; see the installation page for instructions.
macOS
This runs on macOS using the utun driver. It does not yet support sticky sockets, and won't support fwmarks because of Darwin limitations. Since the utun driver cannot have arbitrary interface names, you must either use utun[0-9]+
for an explicit interface name or utun
to have the kernel select one for you. If you choose utun
as the interface name, and the environment variable WG_DARWIN_UTUN_NAME_FILE
is defined, then the actual name of the interface chosen by the kernel is written to the file specified by that variable.
Windows
It is currently a work in progress to strip out the beginnings of an experiment done with the OpenVPN tuntap driver and instead port to the new UWP APIs for tunnels. In other words, this does not yet work on Windows.
FreeBSD
Work in progress, but nothing yet to share.
Building
You can satisfy dependencies with either go get -d -v
or dep ensure -vendor-only
. Then run make
. As this is a Go project, a GOPATH
is required. For example, wireguard-go can be built with:
$ git clone https://git.zx2c4.com/wireguard-go
$ cd wireguard-go
$ export GOPATH="$PWD/gopath"
$ go get -d -v
$ make
License
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 2 as
published by the Free Software Foundation.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License along
with this program; if not, write to the Free Software Foundation, Inc.,
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
---------------------------------------------------------------------------
Additional Permissions For Submission to Apple App Store: Provided that you
are otherwise in compliance with the GPLv2 for each covered work you convey
(including without limitation making the Corresponding Source available in
compliance with Section 3 of the GPLv2), you are granted the additional
the additional permission to convey through the Apple App Store
non-source executable versions of the Program as incorporated into each
applicable covered work as Executable Versions only under the Mozilla
Public License version 2.0 (https://www.mozilla.org/en-US/MPL/2.0/).