Wireguard¶

OpenBSD considerations¶

Random notes

Create an interface with a remonte endpoint.

rr02# ifconfig wg1 create wgport 7896 wgkey `openssl rand -base64 32` 

PUB1="`ifconfig wg1 | grep 'wgpubkey' | cut -d ' ' -f 2`" 

rr02# ifconfig wg1 wgpeer RXzLLWRFsrvBWoH2dHgpGx2jDmq4E1E57R3A/JYTNAU=  wgendpoint rr01.abi.ci.tech.stdigital.network 7964 
rr02# ifconfig wg1 inet6 2c0f:4e00:87f0:981a:0000:0000:0000:0deb/127                                                                                                                                       
rr02# ifconfig wg1 wgpeer RXzLLWRFsrvBWoH2dHgpGx2jDmq4E1E57R3A/JYTNAU=  wgaip 2c0f:4e00:87f0:981a::/64 

Good reference: https://dataswamp.org/~solene/2021-10-09-openbsd-wireguard-exit.html