Re: starting off with wireguard

[z411 <z411%omaera.org@localhost>]

wg(4) should be in GENERIC. I am running it just fine on one of my 11.0
amd64 servers (it should be available in 10.x as well):

chiaki$ uname -a
NetBSD chiaki 11.0_RC2 NetBSD 11.0_RC2 (GENERIC) #0: Wed Mar  4 21:02:00
UTC 2026
mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC amd64
chiaki$ ifconfig wg0
wg0: flags=0x8041<UP,RUNNING,MULTICAST> mtu 1420
        status: active
        inet 10.0.0.11/32 flags 0
chiaki$ ping -c 1 10.0.0.1
PING 10.0.0.1 (10.0.0.1): 56 data bytes
64 bytes from 10.0.0.1: icmp_seq=0 ttl=64 time=293.994300 ms

What happens if you run "ifconfig wg0 create"?

On 3/18/26 20:30, Greg Troxel wrote:
> Related, it seems wg is UDP only, and assuming that's true, what ports
> do people find is most likely to work in semi-censored environments?

That is correct. Generally the well known port for wg is 51820 but some
people change it to avoid potential ISP blocks.