Yealink Forums
WireGuard VPN - Printable Version

+- Yealink Forums (http://forum.yealink.com/forum)
+-- Forum: IP Phone Series (/forumdisplay.php?fid=4)
+--- Forum: Wishlist (/forumdisplay.php?fid=13)
+--- Thread: WireGuard VPN (/showthread.php?tid=41330)



WireGuard VPN - mkeuter - 11-26-2017 04:51 PM

Hi, I am Michael from the AstLinux Project. A Linux-based Asterisk + Router/VPN distribution.

We've recently included the excellent WireGuard VPN into our project and made some tests comparing it with OpenVPN (which we also include).

WireGuard has much faster throughput on the same hardware and lower jitter than OpenVPN.
It is also very lightweight and easy to implement in Linux.
It would be great if Yealink would consider to additionally include Wireguard into their IP phone firmware in the future.
Wireguard is used by professional VPN providers as well.

Here are some OpenVPN/WireGuard comparisons.
For a single phone call (100Kbps) the UDP jitter is the same (but only 16 datagrams in the test)
As the traffic increases, the WireGuard jitter remains much lower than OpenVPN.

Code:
## Jetway
pbx3 ~ # iperf3 -s

## Qotom
# OpenVPN #
pbx ~ # iperf3 -c 10.8.1.2
--
[ ID] Interval           Transfer     Bandwidth       Retr
[  4]   0.00-10.00  sec   132 MBytes   111 Mbits/sec   38             sender
[  4]   0.00-10.00  sec   132 MBytes   111 Mbits/sec                  receiver
--
# WireGuard #
pbx ~ # iperf3 -c 10.4.0.3
--
[ ID] Interval           Transfer     Bandwidth       Retr
[  4]   0.00-10.00  sec   606 MBytes   508 Mbits/sec  1086             sender
[  4]   0.00-10.00  sec   603 MBytes   506 Mbits/sec                  receiver
--

# OpenVPN #
pbx ~ # iperf3 -c 10.8.1.2 -u -b 100K
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec   128 KBytes   105 Kbits/sec  0.033 ms  0/16 (0%)  
[  4] Sent 16 datagrams
--
# WireGuard #
pbx ~ # iperf3 -c 10.4.0.3 -u -b 100K
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec   128 KBytes   105 Kbits/sec  0.036 ms  0/16 (0%)  
[  4] Sent 16 datagrams
--

# OpenVPN #
pbx ~ # iperf3 -c 10.8.1.2 -u -b 1M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec  1.19 MBytes   996 Kbits/sec  0.258 ms  0/152 (0%)  
[  4] Sent 152 datagrams
--
# WireGuard #
pbx ~ # iperf3 -c 10.4.0.3 -u -b 1M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec  1.19 MBytes   996 Kbits/sec  0.050 ms  0/152 (0%)  
[  4] Sent 152 datagrams
--

# OpenVPN #
pbx ~ # iperf3 -c 10.8.1.2 -u -b 10M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec  11.8 MBytes  9.90 Mbits/sec  0.571 ms  0/1511 (0%)  
[  4] Sent 1511 datagrams
--
# WireGuard #
pbx ~ # iperf3 -c 10.4.0.3 -u -b 10M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec  11.8 MBytes  9.90 Mbits/sec  0.075 ms  0/1511 (0%)  
[  4] Sent 1511 datagrams
--

# OpenVPN #
pbx ~ # iperf3 -c 10.8.1.2 -u -b 100M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec   118 MBytes  99.0 Mbits/sec  0.701 ms  13293/14977 (89%)  
[  4] Sent 14977 datagrams
--
# WireGuard #
pbx ~ # iperf3 -c 10.4.0.3 -u -b 100M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec   118 MBytes  99.1 Mbits/sec  0.098 ms  2995/15099 (20%)  
[  4] Sent 15099 datagrams
--

# OpenVPN #
pbx ~ # iperf3 -c 10.8.1.2 -u -b 500M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec   591 MBytes   496 Mbits/sec  0.728 ms  73173/74925 (98%)  
[  4] Sent 74925 datagrams
--
# WireGuard #
pbx ~ # iperf3 -c 10.4.0.3 -u -b 500M
--
[ ID] Interval           Transfer     Bandwidth       Jitter    Lost/Total Datagrams
[  4]   0.00-10.00  sec   592 MBytes   497 Mbits/sec  0.092 ms  49873/75819 (66%)  
[  4] Sent 75819 datagrams
--

Latency:

# OpenVPN #
pbx ~ # fping -c10 10.8.1.2
--
10.8.1.2 : xmt/rcv/%loss = 10/10/0%, min/avg/max = 0.48/0.52/0.61
--
# WireGuard #
pbx ~ # fping -c10 10.4.0.3
--
10.4.0.3 : xmt/rcv/%loss = 10/10/0%, min/avg/max = 0.34/0.46/0.53
--

PS: If there is any interest, I can also post the exact data for for the test environment.


RE: WireGuard VPN - oliv - 03-21-2018 08:20 AM

If I'm not mistaken, current Yealink (Open)VPN settings only support one VPN per phone.
What about supporting two VPNs or more at the same time ?


RE: WireGuard VPN - tomtjes - 07-08-2019 09:55 PM

I would love to have the option of using Wireguard as well. What are the chances that it will be implemented?


RE: WireGuard VPN - siny - 04-14-2020 04:06 PM

Hello!

I would like to resurrect this old theme, now that WireGuard is officially included in newest Linux kernel and backports exist for older ones.

Is there any chance to get WireGuard support in Yealink phones?
Sometime...

Maybe even in older devices (I am pushing it now).

Best regards!


RE: WireGuard VPN - bozko - 10-11-2020 12:21 PM

wireguard will be great option because:

- it is simple
- it is really FAST
- can be audited very easy
- all config can be integrated in web gui - no more tarballs, sha/md5 mess, etc...


RE: WireGuard VPN - oliv - 08-08-2022 11:00 PM

Wireguard would be very welcome !
+1