What are /r/vyos' favorite Products & Services?

From 3.5 billion Reddit comments

Thanks for replying. As far as I can tell (from the Wiki and related Github discussion) the 'set interfaces wireguard [interface] address [address]' is what creates the interface itself. Doing (run) show interfaces lists only eth0 and l0, but running the set interfaces command for the WireGuard interface of choice then adds it to the show interfaces list again.

I already did use tab completion and address is one of the few options available after 'wg01' (or whatever you want to call your interface; I just copied wg01 from the Wiki). It does accept the command if you use a different IP and subnet (eg 10.0.0.50/24, it just doesn't work for the address given to me by AzireVPN. I just get an error saying invalid value.

I like your style. And yes, I agree, too many out there want their hand held and don't want to dive in, at any level, what it is they are doing. I work in networking, and I have a rack at home with various equipment in it that I try out all kinds of crazy stuff for no other purpose than curiosity. A pair of Juniper SRX240's, a pair of PaloAlto PA-3020's (very noisy, don't recommend unless you like living alone, LOL) the Fortigate mentioned, some Cisco 3850's, etc. I have some Cisco routers but very much prefer to make my own.

I only have the FortiGate because I am studying for my NSE4 exam, and while it would be super overkill for home, I'd eventually like to throw it in the topology just for grins and giggles and to keep with how things are done on those devices.

I've configured a router on vanilla Linux before complete with dynamic routing using OSPF but that's a bit overkill for home use. I have a pair of Dell Optiplex 5050's that I use for most such things. One is currently running OPNSense. It does well, but a bit much for home use really. Which is why I landed on VyOS. I have never used or set it up before so I thought it would be a bit of fun and adventure to kick the wheels on it.

I have it set up to do basic routing and the basic firewall set up. Which is when I though, if I can connect this to my NordVPN service it would be just about perfect. Wireguard, I think, would be about as perfect as it could get.

u/damn_the_bad_luck You're speaking my language. I would much rather slap a Linux distro on a box and make it a router, but NordVPN is not supporting, well at least as far as I can tell, Wireguard on router boxes, yet. You can use it through the Linux client.

Anyway, I would like to use VyOS as I kind of like it, but, that said, I assume you are just setting up Debian and using nftables/netfilter as your firewall or do you use a dedicated firewall appliance?

I have a Fortinet 100D in my rack but it cannot be configured to connect to Wireguard or I would use it as my edge router.

I'll check out Mullvad as I would too much rather switch from OpenVPN to Wiregurd.

They have some other donation page that is a bit harder to find that handles their licensing model.

https://opencollective.com/vyos

You can find the link to this on their blog.

https://blog.vyos.io/introducing-vyos-on-opencollective

I could be wrong but the professional use sounds like a business license to me which is $100 a month

I'll 100% admit it's not any of my work, other than a few slight modifications.

https://grafana.com/grafana/dashboards/1756

The OID mapping from there is GOLDEN and is probably 90% of the actual work.

fwiw, there are a few steps missing in that branch. I haven't committed anything in awhile but I've since had to account for:

• setting proper mtu/mss clamp on the wg interface
• setting/forcing the default route and/or (re)setting the default route on PBR routing tables

If Mullvad is working for you then yeah prob best to stick with what works. But if you do decide to try again reach out to me on gitlab as I wouldn't mind some extra testers to let me know if I'm missing anything, etc in my sol'n. It's working for me (I've now got multiple tunnels running and can PBR route out to different locations as needed for different things) , but wouldn't mind if it worked for anyone. I need to clean it up and test the docker. A few more rainy weekends and I should have it ready for someone other than me. :)

I checked your script and retried the recipe with no luck... I seem to have more success with Mullvad right now, I'll continue that way for now.

Thanks for your help, it was fun reading some groovy!