microsoft / microsoft/WSL

Wireguard Support through WSL Kernel

Open
#7,547 22 comments 24 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

feature
Dominant language
C++
Stars
33.7k
Forks
1.8k
Avg merge
3d 17h
Merged PRs (30d)
116

Description

Is your feature request related to a problem? Please describe.
Wireguard support is limited in WSL because the kernel does not have Connmark support, even though the newest versions of the kernel that WSL 2 is now using should be compatible with WG.

Describe the solution you'd like
The flag CONFIG_NETFILTER_XT_MATCH_CONNMARK should be enabled when building the kernel. No other change should be needed

Describe alternatives you've considered
Using a custom kernel, but that seems overkill for basic support that native distros have.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file or test is named. Start by locating the WSL kernel build configuration and the CONFIG_NETFILTER_XT_MATCH_CONNMARK setting; enable it in the kernel configuration, then verify that the resulting WSL kernel exposes Connmark support so WireGuard works without a custom kernel.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux
Domain
networking, operating-systems
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.