See also
WireGuard Overview¶
WireGuard is a new VPN Layer 3 protocol designed for speed and simplicity. Itperforms nearly as fast as hardware-accelerated IPsec and has only a smallnumber of options in its configuration.
Due to this simplicity, WireGuard lacks many of the conveniences of morecomplicated VPN types which can help automate large deployments. Thus, while itsperformance scales well, the management can become cumbersome for large numbersof peers.
WireGuard behaves unlike other traditional VPN types in several ways:
It operates completely in the kernel
Configuration is placed directly on the interfaces
It has no concept of connections or sessions
It has no facilities for user authentication
There is minimal logging from the kernel
It does not bind to a specific interface or address on the firewall, itaccepts traffic to any address on the firewall on its specified port
WireGuard instances consist of a tunnel and one or more peer definitions whichcontain the necessary keys and other configuration data.
WireGuard interfaces carry Layer 3 information and above.
To use WireGuard, upgrade to the latest version of pfSense Plus or pfSense CEsoftware then install the WireGuard package from the Package Manager.
