Page MenuHomeVyOS Platform

Allow creation of wireguard interfaces without requiring peers
Closed, ResolvedPublicFEATURE REQUEST

Description

Reduce requirement for creating a Wireguard interface down to just having a name and a private-key.

As a result we will be able to create a Wireguard interface by just running

generate pki wireguard key-pair install interface wg0

Currently, when you are trying to creating such a stub Wireguard interface, you will see the following message which prevents a commit:

"At least one Wireguard Peer is Required"

NOTE1: Current behavior also prevents you from referencing that to-be-created interface in other commands . For example, if you run

generate wireguard client-config clnt  wg0 server router.example.com

You will receive the following error:

Wireguard interface "wg0" does not exist

NOTE2: Some other platforms I tried allows you to create interfaces first, then create peers later. Where creation of interfaces and peers are decoupled, configuration tasks would easier by being able to be broken down in smaller steps
(example screenshot of a reference idea attached - you see a bunch of interfaces are created, but just one peer is created and assigned to one of the interfaces)

ExampleMikrotik.jpg (359×590 px, 65 KB)

NOTE3: I think it would not be necessary to enforce it this way, but we may request the user to put such interface in "disabled" state before committing such peerless interface configurations if desired

Details

Version
rolling-202406130020
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)

Event Timeline

Alfa80 triaged this task as Wishlist priority.
Alfa80 created this object in space S1 VyOS Public.
syncer changed the subtype of this task from "Task" to "Feature Request".
syncer changed the task status from Open to In progress.Nov 15 2024, 11:34 AM
syncer assigned this task to sskaje.
syncer moved this task from Need Triage to Backlog - Feature Requests on the VyOS Rolling board.
Viacheslav changed the task status from In progress to Needs reporter action.Nov 19 2024, 7:41 PM
Viacheslav subscribed.

Needs testing

dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
dmbaturin changed Issue type from improvement to Feature (new functionality).