Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Wang Jian
Jason A. Donenfeld 于2020年5月5日周二 上午6:28写道: > Can you send full networking configuration in enough detail that I'll be > able to reliably reproduce this problem? If I can't reproduce it, it's > unlikely I'll be able to fix it. I will send full networking configuration to you privately. The configur

Re: Ubuntu kernel >= 5.3.0-52.46 breaks DKMS build for wireguard-linux-compat >= 1.0.20200429, patch included

2020-05-04 Thread Pascal Ernster
Hi Jason, [2020-05-05 06:03] Jason A. Donenfeld: > Ahh, you're running -proposed, gotcha. So I guess I should wait until > this hits the main repo. Any idea when they usually do that? I'm not a Ubuntu developer, but my educated guess would be "when their next HWE kernel security advisory hits th

Re: Ubuntu kernel >= 5.3.0-52.46 breaks DKMS build for wireguard-linux-compat >= 1.0.20200429, patch included

2020-05-04 Thread Jason A. Donenfeld
Hi Pascal, On Mon, May 4, 2020 at 9:52 PM Pascal Ernster wrote: > > Hi Jason, > > > [2020-05-05 03:37] Jason A. Donenfeld: > > Can you confirm to me whether or not this patch fixes the issue on > > both 19.10 and 18.04-hwe? > > > > https://git.zx2c4.com/wireguard-linux-compat/commit/?id=1325bedf8

Re: Ubuntu kernel >= 5.3.0-52.46 breaks DKMS build for wireguard-linux-compat >= 1.0.20200429, patch included

2020-05-04 Thread Pascal Ernster
Hi Jason, [2020-05-05 03:37] Jason A. Donenfeld: > Can you confirm to me whether or not this patch fixes the issue on > both 19.10 and 18.04-hwe? > > https://git.zx2c4.com/wireguard-linux-compat/commit/?id=1325bedf8ee3d69ed58460b7a8fee96d949f67da I don't have a 19.10 machine to test on, but at

Re: Ubuntu kernel >= 5.3.0-52.46 breaks DKMS build for wireguard-linux-compat >= 1.0.20200429, patch included

2020-05-04 Thread Jason A. Donenfeld
Hey Pascal, Thanks a bunch for the report and patch. Can you confirm to me whether or not this patch fixes the issue on both 19.10 and 18.04-hwe? https://git.zx2c4.com/wireguard-linux-compat/commit/?id=1325bedf8ee3d69ed58460b7a8fee96d949f67da Thanks, Jason

Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Jason A. Donenfeld
Sultan had a nice stroke of insight. Let's see if this fixes the issue: https://git.zx2c4.com/wireguard-linux/commit/?h=stable&id=e21300c15cd8365017be856f944efa4db7b1cb95

Re: Is there a way to use wireguard as a non-encrypted VPN?

2020-05-04 Thread Mike O'Connor
On 12/4/20 4:43 am, m...@pmfarmwald.com wrote: > I have some older routers that run OpenWRT just fine, but are a bit slow at > Wireguard (3-5 MBytes/s for SMB transfers) and which are too slow for > playing HD movies. > For these routers/uses I don't care about security, I just want a VPN to > tunn

Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Jason A. Donenfeld
On 5/4/20 4:47 AM, Serge Belyshev wrote: Hi! I can reproduce similar RCU stall with a different kernel under specific conditions on a specific box: [ 54.437636] rcu: INFO: rcu_sched self-detected stall on CPU [ 54.438838] rcu: 0-...!: (2101 ticks this GP) idle=ea6/1/0x4002 soft

Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Jason A. Donenfeld
On 5/4/20 6:49 AM, Wang Jian wrote: > Jason A. Donenfeld 于2020年5月4日周一 下午1:26写道: >> >> Are you routing wireguard over wireguard, or something interesting like that? >> >> Is ipsec being used? > > I don't think I have any fancy use cases. But wireguard over pppoe? > > Other details are > - nftabl

[ANNOUNCE] WireGuard for Ubiquiti devices/EdgeOS has returned

2020-05-04 Thread Jason A. Donenfeld
Hi all, After a period of darkness, our builds of WireGuard for EdgeOS and Ubiquiti devices have returned, thanks to Pascal Vorwerk stepping up to takeover maintenance and CI. We've also moved this from Nils' personal github account into the WireGuard organization. You can get started here: https

Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Wang Jian
Alex Xu (Hello71) 于2020年5月4日周一 下午9:49写道: > > Excerpts from Jason A. Donenfeld's message of May 4, 2020 1:26 am: > > Are you routing wireguard over wireguard, or something interesting like > > that? > > > > Is ipsec being used? > > > > This "DN2800MT" looks like an Atom board from 2012; are you tr

Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Alex Xu (Hello71)
Excerpts from Jason A. Donenfeld's message of May 4, 2020 1:26 am: > Are you routing wireguard over wireguard, or something interesting like that? > > Is ipsec being used? > This "DN2800MT" looks like an Atom board from 2012; are you trying to run a very large bandwidth through it? I think it's

Re: Newbie - WireGuard per systemd on Debian Buster

2020-05-04 Thread Alex Xu (Hello71)
Excerpts from Hans Kraus's message of April 16, 2020 12:23 pm: > I'm a newbie to wireguard and trying to install a working environment, > starting with one server and one client. First I used the example in > > a

Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Wang Jian
Jason A. Donenfeld 于2020年5月4日周一 下午1:26写道: > > Are you routing wireguard over wireguard, or something interesting like that? > > Is ipsec being used? I don't think I have any fancy use cases. But wireguard over pppoe? Other details are - nftable's iptables compatible mode is used, along with ipse

[PATCH] wg-quick: linux: raise priority for mangle nft chain

2020-05-04 Thread Dominique Martinet
Setting mark must be done as early as possible in case there are ipv6 rpfilter rules in the mangle table (a nft filter could be done later but with ip6tables this is the latest it can be checked). Mark must be set before the return path check for it to work correctly. priority -160 gets rendered a

Ubuntu kernel >= 5.3.0-52.46 breaks DKMS build for wireguard-linux-compat >= 1.0.20200429, patch included

2020-05-04 Thread Pascal Ernster
Hi, Ubuntu kernel 5.3.0-52.46 breaks the DKMS build for wireguard-linux-compat 1.0.20200429. Function skb_reset_redirect() got added to the kernel's include/linux/skbuff.h, but collides with the function defintion from wireguard-linux-compat's compat/compat.h: https://kernel.ubuntu.com/git/ubunt

Re: EdgeRouter binaries

2020-05-04 Thread Jason A. Donenfeld
https://github.com/WireGuard/wireguard-vyatta-ubnt/releases

EdgeRouter binaries

2020-05-04 Thread Johannes Z. D. Mieth
Dear all, unfortunately the GitHub repository [1] for WireGuard EdgeRouter binaries seems to be discontinued [2]. Does anybody have a recommendation for another repository to get WireGuard binaries from? What I need are binaries for the EdgeRouter X with firmware ≥ v2.0.8-hotfix, kernel 4.14.54.

Re: soft lockup - may be related to wireguard (backported)

2020-05-04 Thread Serge Belyshev
Hi! I can reproduce similar RCU stall with a different kernel under specific conditions on a specific box: [ 54.437636] rcu: INFO: rcu_sched self-detected stall on CPU [ 54.438838] rcu: 0-...!: (2101 ticks this GP) idle=ea6/1/0x4002 softirq=604/604 fqs=0 [ 54.440052] (t=2101

Re: [PATCH] systemd: add file wireguard.target

2020-05-04 Thread Riccardo Berto
Vouching for this, sounds quite useful. On 4/30/20 3:55 PM, Martin Hauke wrote: > Add file wireguard.target, which allows you to stop or restart all > instances. > --- > src/systemd/wg-quick@.service | 1 + > src/systemd/wireguard.target | 2 ++ > 2 files changed, 3 insertions(+) > create mode

Newbie - WireGuard per systemd on Debian Buster

2020-05-04 Thread Hans Kraus
I'm a newbie to wireguard and trying to install a working environment, starting with one server and one client. First I used the example in and got it working. To get a more persistent installation I followed t