How to install Wireguard to Synology

Zerotier it was a great solution for all VPN locations until i found out the performance of Wireguard.
Installation of Wireguard to Synology looks like was not that easy i was expected (just upload the app).

After i found a github guy who explain how to compile the application from docker i had the chance to test the performance.
Installation steps:
1. Install docker and gitserver
2. Commands to to compile in /root

git clone https://github.com/runfalk/synology-wireguard.git
cd synology-wireguard/
docker build -t synobuild .
docker run --rm --privileged --env PACKAGE_ARCH=avoton --env DSM_VER=6.2 -v $(pwd):/result_spk synobuild

3. Go to /root/synology-wireguard/WireGuard-0.0.20190702 , in my case and
4. synopkg install WireGuard-avoton-0.0.20190702.spk
5. Go to Synology webpage and find for Wireguard and start the app.
That’s it.

Source: https://github.com/runfalk/synology-wireguard

Performance?
Iperf3 between vyos quad core and synology DS2415+

Same topology as here.
Iperf3 from Oradea to Timisoara (Synology is the sender here, he is doing the hard job or encryption):

[email protected]# iperf3 -c 10.2.1.12 -P 5 -t 14 | grep -i sum
[SUM] 0.00-1.00 sec 46.4 MBytes 390 Mbits/sec 153
[SUM] 1.00-2.00 sec 47.7 MBytes 400 Mbits/sec 59
[SUM] 2.00-3.00 sec 49.5 MBytes 416 Mbits/sec 85
[SUM] 3.00-4.00 sec 39.2 MBytes 329 Mbits/sec 101
[SUM] 4.00-5.00 sec 50.6 MBytes 424 Mbits/sec 60
[SUM] 5.00-6.00 sec 36.0 MBytes 302 Mbits/sec 100
[SUM] 6.00-7.00 sec 38.9 MBytes 327 Mbits/sec 43
[SUM] 7.00-8.00 sec 44.2 MBytes 371 Mbits/sec 76
[SUM] 8.00-9.00 sec 41.0 MBytes 344 Mbits/sec 85
[SUM] 9.00-10.00 sec 38.3 MBytes 321 Mbits/sec 145
[SUM] 10.00-11.00 sec 39.5 MBytes 331 Mbits/sec 70
[SUM] 11.00-12.00 sec 52.2 MBytes 438 Mbits/sec 66
[SUM] 12.00-13.00 sec 37.8 MBytes 317 Mbits/sec 81
[SUM] 13.00-14.00 sec 44.3 MBytes 372 Mbits/sec 170
[SUM] 0.00-14.00 sec 606 MBytes 363 Mbits/sec 1294 sender
[SUM] 0.00-14.00 sec 603 MBytes 361 Mbits/sec receiver

Iperf3 from Timisoara to Oradea (encryption is done by vyos, synology is only decrypting data:

[email protected]# iperf3 -c 10.2.1.12 -P 5 -t 14 -R | grep -i sum
[SUM] 0.00-1.00 sec 63.5 MBytes 533 Mbits/sec
[SUM] 1.00-2.00 sec 60.6 MBytes 509 Mbits/sec
[SUM] 2.00-3.00 sec 44.4 MBytes 372 Mbits/sec
[SUM] 3.00-4.00 sec 65.6 MBytes 550 Mbits/sec
[SUM] 4.00-5.00 sec 55.2 MBytes 463 Mbits/sec
[SUM] 5.00-6.00 sec 48.7 MBytes 409 Mbits/sec
[SUM] 6.00-7.00 sec 59.1 MBytes 496 Mbits/sec
[SUM] 7.00-8.00 sec 53.2 MBytes 446 Mbits/sec
[SUM] 8.00-9.00 sec 52.7 MBytes 442 Mbits/sec
[SUM] 9.00-10.00 sec 61.0 MBytes 512 Mbits/sec
[SUM] 10.00-11.00 sec 52.8 MBytes 443 Mbits/sec
[SUM] 11.00-12.00 sec 56.1 MBytes 471 Mbits/sec
[SUM] 12.00-13.00 sec 54.7 MBytes 459 Mbits/sec
[SUM] 13.00-14.00 sec 54.6 MBytes 458 Mbits/sec
[SUM] 0.00-14.00 sec 788 MBytes 472 Mbits/sec 4420 sender
[SUM] 0.00-14.00 sec 782 MBytes 469 Mbits/sec receiver

To be honest, i’m pretty impressed. I checked zerotier but is far, far away. Like 20-30% of Wireguard throughput, somewhere at 100Mbps up/down.

Leave a reply:

Your email address will not be published.

Site Footer