FRESH

Hacker News

WireGuard for Windows Reaches v1.0

133 points by zx2c4

by cwkcw

2 subcomments

The NSI filter-driver interception is the standout move in this release and it's worth not skimming past. When the documented API (NotifyIpInterfaceChange with MibParameterNotification) doesn't fire for MTU changes, Microsoft confirms the bug in 2021, and the fix never ships, you either live with a 3-second polling loop or you attach a filter driver to \Device\Nsi using IoAttachDeviceToDeviceStack, reverse engineer IOCTL_NSI_SET_ALL_PARAMETERS, and pull MTU straight out of NSI_IP_INTERFACE_RW while the change is being dispatched. That's a very different level of Windows kernel work from 'port Linux WireGuard to another OS.' The NetAdapterCx-helper trick (NdisWdfGetAdapterContextFromAdapterHandle) that kills the Reserved-field ticking time bomb is the quieter fix but arguably more important for the next decade of reliability.

by twarge

2 subcomments

wireguard on windows and linux are extraordinarily solid at my org.
However, we have a lot of difficulty with macOS, seemingly with rather basic OS-level bugs that don't seem to be their fault: the big one is that a wireguard profile distributed by MDM for a system seems to work for the logged in user, but not for any other user. Seems to be a keychain issue.
While I don't expect any support, there does not seem to be a system to support getting pull requests reviewed and mainlined (including a PR that might address my need). Even tried IRC.

by jaydenmilne

0 subcomment

Very impressive work, WireGuard is a phenomenal piece of software, congrats on getting to 1.0
I can see Raymond Chen’s eye twitching at some of those (clever and necessary!) undocumented workarounds though :D
Windows is just a different world I guess

by bakugo

0 subcomment

Very glad to see this maintained again, for years I thought it was abandoned and feared that it would break with a Windows update or something.
That said, I've been using it for quite a while and it's been surprisingly bug-free despite the lack of updates, which nowadays is quite impressive in its own right.