Implemented Backlog

WireGuard VPN Add-on

0 vote

avatar

Hi,

Currently, WireGuard (https://www.wireguard.com/) is already in widespread use in the private sector, and this is rising steadily. As this is a slim, fast and secure VPN technology, it will also be used in the industrial environment as soon as a stable version is available. Not least because WireGuard will be integrated into the Linux kernel 5.6.

Therefore, I would welcome a WireGuard VPN add-on.

I've also successfully tested the CLI of version 0.0.38 (https://chocolatey.org/packages/wireguard):

Connect:

& 'C:\Program Files\WireGuard\wireguard.exe' /installtunnelservice '<Path to config file>'

Disconnect:

& 'C:\Program Files\WireGuard\wireguard.exe' /uninstalltunnelservice '<Tunnel name>'

Best Regards

All Comments (59)

avatar

Hello,

As of now, I would suggest using the Custom VPN entry type to be able to launch your VPN inside RDM.

Best regardsm

Jeff Dagenais

avatar
backdoor
Disabled

Dear Jeff,

is t here a release date/version for supporting Wireguard?

avatar

@backdoor,

The solution proposed by myself previously is still the one to use. There's no integration of Wireguard for the moment, but I will see with our engineering department if it's on our list.

Best regards,

Jeff Dagenais

avatar

Hello,

After verification, we may have something in RDM 2020.3.x, but we cannot guarantee a timeline for it's delivery.

Best regards,

Jeff Dagenais

avatar
patricblass
Disabled

Are there some news, on wireguard Integration?

avatar

Hello,

Nothing for now but we will raise the priority. It's assigned to a developer as well.

For now using a Custom VPN with the command line provided in the first post is the workaround.

Regards,

Hubert Mireault

avatar

Also looking forward for this feature. Especially the connection based VPN's will add some security too, rather using some general "open" VPN's.

avatar

Hello, now we have mid 2022 and WireGuard is more used than ever. Is there any update on this?

avatar

Hello,

We will be able to work on this hopefully soon, but right now the workaround is to use a Command Line entry with the line that was mentioned in the first post.

Regards,

Hubert Mireault

avatar

I would love to see a Devolutions implementation of Wireguard in RDM.

We have a lot of remote sites that are capable of using Wireguard. However as RDM does not properly support it we are currently using OpenVPN GUI which is our next best option. OpenVPN GUI is a much more ad-hoc implementation either simulating a keyboard to "manually" type in credentials into a GUI window or passing a plan text file with the credentials in it. I understand that this is the best Devolutions can do as these limitations are due to how OpenVPN GUI works, but we are actively looking for alternative solutions because of this.

The workaround for wireguard suggested above is a good one however pushing config files to our end users is not a good option for us. We would need a native solution that does not rely on external files being available before we could use Wireguard.

I will be checking out the RDM Wireguard solution when it is available. I hope we don't have to wait too much longer.

avatar

Hello,

Do you think having an option to store the file's data in RDM, which RDM would then write locally for the duration of the connection with WireGuard, would be a good solution? Since the command line for WireGuard necessitates a file, I assume this is the best we could do.

As a note we are hoping to get to integrating WireGuard for RDM 2022.3, which is planned for release later this year. The more information you can give us on how you'd like to be able to use WireGuard in RDM, the better we'll be able to make the integration suit your needs.

Regards,

Hubert Mireault

avatar

If you are going for a "native" addon. I would have thought you would build an add-on that would embed wireguard into RDM.

I have not done this myself so the following is speculation but by embedding wireguard you should avoid the need for passing files or command line arguments to external applications.

For information on how to embed wireguard I found this, it looks very useful:

https://www.wireguard.com/embedding/

Some people may still want something that integrates with the external application but by embedding it the addon should be much more secure (no external credential passing), quicker (RDM will have the exact status of the VPN so no waiting for timers/delays and then assuming it worked) and reliable (RDM will be working with a known version of wireguard that devolutions implements at build time, not whatever crusty old version is on the end users PC).

I believe I read somewhere that wireguard is meant to be embedded into other applications to provide more end user friendly features that the wireguard devs don't want to focus on, they just focus on making a good slim VPN.

avatar

Hello,

That's very interesting, I wasn't aware of this possibility with WireGuard. We will have to look into it, thank you!

Regards,

Hubert Mireault

avatar

Any updates / ETA about wireguard implementation?

avatar

Hello,

It is assigned to a developer and we are hoping to be able to add the integration for version 2022.3.

Regards,

Hubert Mireault

avatar

Hello,

Just to update you, unfortunately I don't think we will be able to add a Wireguard integration for RDM 2022.3, we will instead shoot for a future roadmap. We will update this thread once we have more information.

Regards,

Hubert Mireault

avatar

Hello,

Just to update you, unfortunately I don't think we will be able to add a Wireguard integration for RDM 2022.3, we will instead shoot for a future roadmap. We will update this thread once we have more information.

Regards,

I understand these things take time however please keep some priority on this. WireGuard is becoming more and more relevant as a secure and fast VPN solution. I will be using it day one when it is implemented into RDM.

avatar

Of course, we're not lowering priority at all, it's simply that our roadmap for 2022.3 was ambitious and in the end we had to cut the Wireguard integration. It will be in our early tasks when we start work on 2023.1.

Regards,

Hubert Mireault

avatar

Hello,

Support for WireGuard VPN has been implemented and will be included in our 2023.1 release.

Regards

Jonathan Del Signore

avatar

Support for WireGuard VPN has been implemented and will be included in our 2023.1 release.

Fantastic, Thankyou!!

Out of curiosity how was it implemented, did you embed it or does it require Wireguard to be installed alongside RDM?

avatar

That are great news!

avatar

Hi Chris,

For now, it will require WireGuard to be installed. We build the config file and save it temporarily in localappdata to start the vpn via command line.

The embedded dll mode will require a bit more investigation on our part, as we're not sure if it's realistically doable with RDM.

Regards

Jonathan Del Signore

avatar

Hi,

Is it in the beta 2023.1.6 ?

avatar

Hello,

Yes this is included in the beta 2023.1.6.

Regards

Jonathan Del Signore

avatar

I'm not able to find the Wireguard choice.

avatar

Hello,

Since this is an add-on, you first need to enable it through Tools -> Add-on Manager :

Regards

Jonathan Del Signore

avatar

Thanks... feel stupid....

avatar

Hallo, aktivieren lässt sich das Addon bei mir schon und auch die Konfigurationsdaten importieren. Doch bei Start der Verbindung kommt eine Meldung "Access is denied". Per Wireguard Client - also manuell - funktioniert die Verbindung. Irgendeine Idee ?

(Ich verwende die Version 2023.1.20.0 64-bit)

avatar

Hallo, aktivieren lässt sich das Addon bei mir schon und auch die Konfigurationsdaten importieren. Doch bei Start der Verbindung kommt eine Meldung "Access is denied". Per Wireguard Client - also manuell - funktioniert die Verbindung. Irgendeine Idee ?

(Ich verwende die Version 2023.1.20.0 64-bit)

Ja: Programm mit admin-Rechten starten ...

avatar

Hallo, aktivieren lässt sich das Addon bei mir schon und auch die Konfigurationsdaten importieren. Doch bei Start der Verbindung kommt eine Meldung "Access is denied". Per Wireguard Client - also manuell - funktioniert die Verbindung. Irgendeine Idee ?

(Ich verwende die Version 2023.1.20.0 64-bit)

Ja: Programm mit admin-Rechten starten ...

Hello,

Forgive the intervention in Engish,

I was wondering if you would allow me to open a case for your issue with the Wireguard VPN entry in RDM ?

Our engineers mentioned this isn't the first time they've seen this issue and we'd like to look into it.

Best regards,