wireguard-kmp-default - Fast, modern, secure kernel VPN tunnel

WireGuard is a novel VPN that runs inside the Linux Kernel and uses state-of-the-art cryptography (the "Noise" protocol). It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. It runs over UDP.

Homepage	https://www.wireguard.com/

OpenSUSE Tumbleweed

Distribution		Version	Since	Package	Installed	Packager
OpenSUSE Tumbleweed oss	rpm	0.0.20200215_k5.5.9_1-2.2	Mar 22	140 kiB	346 kiB	https://bugs.opensuse.org

Latest updates

OpenSUSE Tumbleweed oss: Updated from 0.0.20200215_k5.5.7_1-2.1 to 0.0.20200215_k5.5.9_1-2.2

Mar 22

Fix build on openSUSE 15.2
- wireguard-fix-leap152.patch

OpenSUSE Tumbleweed oss: Updated from 0.0.20200215_k5.5.6_1-1.2 to 0.0.20200215_k5.5.7_1-2.1

Mar 08

Fix build on openSUSE 15.2
- wireguard-fix-leap152.patch

OpenSUSE Tumbleweed oss: Updated from 0.0.20200214_k5.5.5_1-1.3 to 0.0.20200215_k5.5.6_1-1.2

Feb 29

Update to version 0.0.20200215
- send: cleanup skb padding calculation
- socket: remove useless synchronize_net

OpenSUSE Tumbleweed oss: Updated from 0.0.20200214_k5.5.4_1-1.2 to 0.0.20200214_k5.5.5_1-1.3

Feb 26

Update to version 0.0.20200214
- chacha20poly1305: defensively protect against large inputs
- netns: ensure that icmp src address is correct with nat
- receive: reset last_under_load to zero
- send: account for mtu=0 devices

OpenSUSE Tumbleweed oss: Updated from 0.0.20200205_k5.5.2_1-1.3 to 0.0.20200214_k5.5.4_1-1.2

Feb 20

Update to version 0.0.20200214
- chacha20poly1305: defensively protect against large inputs
- netns: ensure that icmp src address is correct with nat
- receive: reset last_under_load to zero
- send: account for mtu=0 devices

OpenSUSE Tumbleweed oss: Updated from 0.0.20200205_k5.5.1_1-1.2 to 0.0.20200205_k5.5.2_1-1.3

Feb 16

Update to version 0.0.20200205
- allowedips: remove previously added list item when OOM fail
- noise: reject peers with low order public keys
- netns: ensure non-addition of peers with failed precomputation
- netns: tie socket waiting to target pid

OpenSUSE Tumbleweed oss: Updated from 0.0.20200128_k5.4.14_2-1.3 to 0.0.20200205_k5.5.1_1-1.2

Feb 09

Update to version 0.0.20200205
- allowedips: remove previously added list item when OOM fail
- noise: reject peers with low order public keys
- netns: ensure non-addition of peers with failed precomputation
- netns: tie socket waiting to target pid

OpenSUSE Tumbleweed oss: Updated from 0.0.20200121_k5.4.14_1-1.3 to 0.0.20200128_k5.4.14_2-1.3

Feb 04

Update to version 0.0.20200128
- qemu: bump kernel
- compat: refuse to build on >= 5.6
- compat: account for frankenzinc being in 5.5

OpenSUSE Tumbleweed oss: Updated from 0.0.20200121_k5.4.13_1-1.2 to 0.0.20200121_k5.4.14_1-1.3

Jan 29

Update to version 0.0.20200121
- Makefile: strip prefixed v from version.h
- device: skb_list_walk_safe moved upstream
- curve25519: x86_64: replace with formally verified implementation

OpenSUSE Tumbleweed oss: Updated from 0.0.20191219_k5.4.10_1-1.3 to 0.0.20200121_k5.4.13_1-1.2

Jan 24

Update to version 0.0.20200121
- Makefile: strip prefixed v from version.h
- device: skb_list_walk_safe moved upstream
- curve25519: x86_64: replace with formally verified implementation

OpenSUSE Tumbleweed oss: Updated from 0.0.20191219_k5.4.7_1-1.2 to 0.0.20191219_k5.4.10_1-1.3

Jan 15

Update to version 0.0.20191219
- wg-quick: linux: try both iptables(8) and nft(8) on teardown
- wg-quick: linux: use already configured addresses instead of in-memory
- compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
- tools: adjust wg.8 syntax for consistency in COMMANDS section

OpenSUSE Tumbleweed oss: Updated from 0.0.20191219_k5.3.12_2-1.1 to 0.0.20191219_k5.4.7_1-1.2

Jan 10

Update to version 0.0.20191219
- wg-quick: linux: try both iptables(8) and nft(8) on teardown
- wg-quick: linux: use already configured addresses instead of in-memory
- compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
- tools: adjust wg.8 syntax for consistency in COMMANDS section

OpenSUSE Tumbleweed oss: Updated from 0.0.20191212_k5.3.12_1-1.1 to 0.0.20191219_k5.3.12_2-1.1

Dec 24

Update to version 0.0.20191219
- wg-quick: linux: try both iptables(8) and nft(8) on teardown
- wg-quick: linux: use already configured addresses instead of in-memory
- compat: ipv6_dst_lookup_flow was backported to 5.3 and 5.4
- tools: adjust wg.8 syntax for consistency in COMMANDS section

OpenSUSE Tumbleweed oss: Updated from 0.0.20191205_k5.3.12_1-1.1 to 0.0.20191212_k5.3.12_1-1.1

Dec 16

Update to version 0.0.20191212
- socket: convert to ipv6_dst_lookup_flow for 5.5
- wg-quick: linux: add support for nft and prefer it
- wg-quick: linux: support older nft(8)
- global: fix up spelling
- main: remove unused include <linux/version.h>

OpenSUSE Tumbleweed oss: Updated from 0.0.20191127_k5.3.12_1-1.1 to 0.0.20191205_k5.3.12_1-1.1

Dec 13

Update to version 0.0.20191127
- wg-quick: linux: suppress error when finding unused table
- wg-quick: linux: ensure postdown hooks execute
- wg-quick: linux: have remove_iptables return true
- wg-quick: linux: iptables-* -w is not widely supported
- ipc: make sure userspace communication frees wgdevice

OpenSUSE Tumbleweed oss: Version 0.0.20191127_k5.3.12_1-1.1 introduced

Dec 04

Update to version 0.0.20191127
- messages: recalculate rekey max based on a one minute flood
- allowedips: safely dereference rcu roots
- socket: remove redundant check of new4
- allowedips: avoid double lock in selftest error case
- wg-quick: linux: only touch net.ipv4 for v4
- wg-quick: linux: filter bogus injected packets and don't disable rpfilter
- reresolve-dns: remove invalid anchors on regex match
- tools: add syncconf command

Related packages

wireguard - fast, modern, secure kernel VPN tunnel (metapackage)

wireguard-kmp-default-debuginfo - Debug information for package wireguard-kmp-default