[Feature request] Replace Wireguard with AmneziaWG

Sorry no such plans.

It's a shame. I'm sure lots of people woild love to see first-party treatment for those tools in the Gl-Inet UI.

Great news! Which devices will get updates? Should we expect updates for the original Flint and Brume 2?

As long as I know, it involves a kernel patch. I don't know the details so cannot really give a schedule. Hope it will be clear soon.

It doesn't seem too much complicated...
There is a step-by-step HERE

It starts in Russian, but there is also an explanation in English. Just scroll down until the title "Automatic configuration of AmneziaWG for OpenWRT version 23.05.0 and newer"

That is not how we should integrate in our firmware.

If there is the case, people should just do according to that guide.

A genuine question: Why does GL-iNet need to develop a completely new firmware instead of simply using standard OpenWRT with a few visual tweaks, like the Argon Theme?

From what I understand, all the features available in GL-iNet’s firmware already exist in the regular OpenWRT version. Couldn’t GL-iNet just write a few scripts to automate what’s already possible?

1 Like

At the very beginning, people just buy hardware and install vanilla OpenWrt. But vanilla OpenWrt is very difficult to configure, unless you don't agree.

For example configuring repeater or vpn, it is nearly impossible for a beginner. You need to take care of the network, firewall, wifi and a lot.

If you don't agree, that is OK. But you will not ask us to support AmneziaWG then, because there is script already.

I totally agree that OpenWrt is quite difficult to configure.

To solve this issue, instead of creating a new firmware that demand a lot of work, you could write some shell-scripts to automate this process.

I mean: no change on OpenWrt, no change on Kernel, and just add a new LuCi Theme where the user will find some GL-iNet Scripts to configure all features easily.

This was the approach of Kurumin Linux 20 years ago and it was a success, resulting in a very user-friendly Linux distro.

The catch is that older devices (for example Brume 2) have an older version of openwrt - 21.02 on firmware 4.7.4.

GL-iNet MT2500 (Brume 2) is fully supported by OpenWrt 24.10.1

This is an evidence of what I'm trying to say: GL-iNet could just use Vanilla OpenWrt with cosmetic improvements to make OpenWrt more user-friendly, by adding scripts to automate what is difficult to do.

I believe this will be much easier to maintain and will keep it syncronized with OpenWrt.

1 Like

Seems users demand more. What we are doing is to make it fully compatible with our Wireguard configurations.

Also if they make it more compatible with the current configuration stanza with OpenWrt like the ones from luci-proto-wireguard or luci-proto-amneziawg ( its just a fork or copy of the original luci wg package, but its still in discussion).

It however adds alot more interopability which is important, because alot of work don't have to be done, it's doable and time consuming, which then can be spend into a part of new features and a part into stabilizing the gl software.

But on the otherside there is also a bit of dark side I might be a bit exagrating.

You have no control whatsoever if a change happens which may break the full logic in your design, here is a example I noticed with the vxlan protocol directly on OpenWrt:

First it was very easy to me to comprehend I needed end point (which is required), and a host (optional), until they did a update with much more options like: peers?

And i still don't get my head around it :slight_smile:, because I don't think it has peers or auto search features it has with unetd a more advanced protocol which does vxlan in a wireguard tunnel.

Or the new change in dnsmasq where the global rules from /tmp/dnsmasq.d start having per instance based names like /tmp/dnsmasq.cfg29283.d/ as example, alot of apps broke like nextdns and adblock apps, as of yet from what I have seen but I'm not up to date on the subject these maintainers implemented a hack.

Such changes can also change the logic which can be annoying.

1 Like

if you add an option to buy the UI which I can install on non gl-inet router running vanilla OpenWRT (perhaps a LuCi theme) I'd be happy to buy it