WireGuard is an extremely simple yet fast and modern VPN that utilizes

state-of-the-art cryptography. It aims to be faster, simpler, leaner, and
more useful than IPSec, while avoiding the massive headache. It intends to
be considerably more performant than OpenVPN. WireGuard is designed as a
general purpose VPN for running on embedded interfaces and super computers
alike, fit for many different circumstances.

This package does not contain anything by itself - it is a "meta-port" that
depends on other wireguard packages.

WWW: https://www.wireguard.com

net/Makefile

@@ -1527,6 +1527,7 @@
     SUBDIR += webalizer-geodb
     SUBDIR += whois
     SUBDIR += widentd
+    SUBDIR += wireguard
     SUBDIR += wireguard-go
     SUBDIR += wireguard-kmod
     SUBDIR += wireguard-tools

net/wireguard/Makefile

@@ -0,0 +1,23 @@
+# $FreeBSD$
+
+PORTNAME=	wireguard
+PORTVERSION=	1
+PORTEPOCH=	1
+CATEGORIES=	net net-vpn
+
+MAINTAINER=	decke@FreeBSD.org
+COMMENT=	Meta-port for Wireguard
+
+RUN_DEPENDS=	wg-quick:net/wireguard-tools
+
+USES=	metaport
+
+.include <bsd.port.options.mk>
+
+.if ${OSVERSION} < 1201000
+RUN_DEPENDS+=	wireguard-go:net/wireguard-go
+.else
+RUN_DEPENDS+=	${KMODDIR}/if_wg.ko:net/wireguard-kmod
+.endif
+
+.include <bsd.port.mk>

net/wireguard/pkg-descr

@@ -0,0 +1,11 @@
+WireGuard is an extremely simple yet fast and modern VPN that utilizes
+state-of-the-art cryptography. It aims to be faster, simpler, leaner, and
+more useful than IPSec, while avoiding the massive headache. It intends to
+be considerably more performant than OpenVPN. WireGuard is designed as a
+general purpose VPN for running on embedded interfaces and super computers
+alike, fit for many different circumstances.
+
+This package does not contain anything by itself - it is a "meta-port" that
+depends on other wireguard packages.
+
+WWW: https://www.wireguard.com

net/wireguard/pkg-message

@@ -0,0 +1,19 @@
+[
+{ type: install
+  message: <<EOM
+For FreeBSD < 12.1 only the userland implementation wireguard-go is
+available.
+
+For FreeBSD >= 12.1 we default to use the kernel module if_wg(4). If
+you experience problems with it you can switch back to wireguard-go
+easily by unloading the kernel module. The userland tools wg-quick(8)
+and wg(8) try to use if_wg(4) if available and otherwise fallback to
+wireguard-go. Config files are fully compatible.
+
+To load the kernel module at boot add this to your /etc/rc.conf or
+/etc/rc.conf.d/wireguard file:
+
+kld_list="/boot/modules/if_wg.ko"
+EOM
+}
+]