BSD Ports

net/amnezia-kmod 3.1.0.1405500 FreeBSD

Amnezia VPN FreeBSD kernel module implementation

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
d0f1961585
License
MIT
Categories
net, net-vpn, kld
Package size
41.7 KiB, 101.3 KiB installed

Description

FreeBSD kernel module for Amnezia VPN protocol.

Amnezia VPN is a VPN protocol that is backward compatible with the WireGuard VPN protocol. It offers protection against detection by Deep Packet Inspection (DPI) systems. At the same time, it retains the simplified architecture and high performance.

The Amnezia VPN protocol has issues with detection due to distinctive packet signatures. Amnezia addresses this problem by employing advanced obfuscation methods, allowing its traffic to blend seamlessly with regular internet traffic.

This package provides the FreeBSD kernel module (if_amn.ko) implementation for Amnezia VPN, enabling kernel-level support for the protocol.

Partial support of AWG2 protocol added - 2.0 S3/S4 parameters.

In the other systems

The newest version among them is 3.1.0.1501503, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
FreeBSDnet/amnezia-kmod3.1.0.1405500none known-[email protected]2026-09-28
HardenedBSDnet/amnezia-kmod3.1.0.1501503 newestno data-[email protected]-
GhostBSDnet/amnezia-kmod2.0.12.1500068no data-[email protected]-

Install

Binary package:

pkg install amnezia-kmod

From the ports tree:

cd /usr/ports/net/amnezia-kmod/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	amnezia-kmod>0:net/amnezia-kmod

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest3.1.0.14040003.1.0.1404000-1.0.8.14020003.1.0.1404000
FreeBSD:14:quarterly3.1.0.14040003.1.0.1404000n/a-3.1.0.1404000
FreeBSD:15:latest3.1.0.15010003.1.0.1501000n/a1.0.8.15000631.0.8.1500063
FreeBSD:15:quarterly3.1.0.15010003.1.0.1501000n/an/an/a
FreeBSD:16:latest3.1.0.16000263.1.0.1600029n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

No port depends on this one.

Configuration

No options to configure.

USES
kmod uidfix
Service scripts
none

Files

distinfo 1
FileSizeSHA256
vgrebenschikov-wireguard-amnezia-kmod-v3.1.0_GH0.tar.gz7574324977aed968420600a7026428e5b2f3444fd5913b7fcc52984ee41b3a660cb5f

Commit history 2

DateCommitCreditsLog message
d0f1961585 Vladimir Grebenshchikov net/amnezia-kmod: Update 2.0.12 => 3.1.0
Changelog: * if_amn: add AmneziaWG v3 protocol support * Extend the FreeBSD kernel module with the protocol and configuration features required for interoperability with AmneziaWG v3, while retaining compatibility with existing AWG2 userspace. * Implement AWG3 header protection using a small standalone ChaCha20-IETF implementation. Use the random junk prefix as the 96-bit nonce and apply header protection to handshake, cookie, and transport headers. Require S1-S4 to provide enough nonce material whenever a header protection key is configured. Add a known-answer ChaCha20 self-test to the module's existing cryptographic self-test suite. * Add support for the new AWG3 configuration parameters: - HeaderProtectionKey - ContentPaddingAddition - RekeyAfterTime …
d128f14114 Vladimir Grebenshchikov net/amnezia-kmod: Update 2.0.11 => 2.0.12
Changelog: - if_amn: wg_crypto: validate OCF authentication result. - Check crp_etype after crypto_dispatch() so packets with an invalid Poly1305 tag are rejected. - Require a synchronous crypto session before using a stack-allocated request. https://github.com/vgrebenschikov/wireguard-amnezia-kmod/releases/tag/v2.0.12 PR: 297625 Security: CVE-2026-58085 Sponsored by: UNIS Labs MFH: 2026Q3