Is WireGuard supported on TL-WR740N?

Post new topic   Reply to topic    DD-WRT Forum Index -> Qualcomm Atheros based Hardware
Goto page 1, 2  Next
Author Message
rnix
DD-WRT User


Joined: 23 Feb 2016
Posts: 258

PostPosted: Sun Aug 18, 2024 10:26    Post subject: Is WireGuard supported on TL-WR740N? Reply with quote
I have ancient TL-WR740N v4 which has only 4MB flash and 32MB RAM.
However, WireGuard on that model doesn't seem to work. I'm running latest r57956 build.

After configuring WG tunnel under Setup > Tunnels and rebooting

Code:
Jan 1 02:00:08 dd-wrt user.info : [httpd] : successfully started
Jan 1 02:00:09 dd-wrt user.info root: Enable WireGuard interface oet1 on port 51820
Jan 1 02:00:09 dd-wrt user.notice eop-tunnel.prewall[818]: Unable to modify interface: Protocol not supported
Jan 1 02:00:09 dd-wrt user.notice eop-tunnel.prewall[818]: Unable to modify interface: Protocol not supported
Jan 1 02:00:10 dd-wrt user.err root: ERROR: WireGuard no valid IPv4 or IPV6 tunnel address for oet1: , please correct, trying the old way
Jan 1 02:00:10 dd-wrt user.info : [sfe] : shortcut (SFE) forwarding engine successfully started
Jan 1 02:00:11 dd-wrt user.info root: WireGuard acquiring /tmp/oet-raip.lock for raip 1057
Jan 1 02:00:11 dd-wrt user.info root: WireGuard /tmp/oet-raip.lock acquired for raip 1057
Jan 1 02:00:12 dd-wrt user.info : [sfe] : shortcut (SFE) forwarding engine successfully started


When I look under Setup > Networking then oet1 interface does not show up there at all.
After quick search I found few threads around the internet mentioning WireGuard requires at least 8MB flash space.

I'm confused because if true - why my device has WireGuard option available at all?
Do I have too big expectations? Very Happy

thanks!
Sponsor
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 13879
Location: Netherlands

PostPosted: Sun Aug 18, 2024 10:55    Post subject: Reply with quote
WireGuard guides are a sticky in the Advanced Networking forum.

From the Client setup guide:
Quote:
WireGuard is usually available on routers with 8 MB Flash RAM or more (there are a few exceptions) and using at least Kernel 3.10 (so not on K2.6 builds).


If you are running K3.10 yours might be an exception Smile

Although this does not bode well:
Quote:
Jan 1 02:00:09 dd-wrt user.notice eop-tunnel.prewall[818]: Unable to modify interface: Protocol not supported


If it is really usable with so little RAM remains to be seen

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
rnix
DD-WRT User


Joined: 23 Feb 2016
Posts: 258

PostPosted: Sun Aug 18, 2024 12:09    Post subject: Reply with quote
This router indeed has kernel 3.10, but I'm not too hopeful due to low flash space and systlog errors.
Just hoped someone can share their first hand experience or provide hints how to verify.
feodim
DD-WRT Novice


Joined: 20 Jan 2026
Posts: 7

PostPosted: Tue Jan 20, 2026 8:54    Post subject: WireGuard not fully supported on TL-WR941NDv3 also Reply with quote
Hi, necropost, but its still actual question Smile.
I have TL-941NDv3 router (also 4/32 model) with the latest dd-wrt on it(v3.0-r63391 std). WireGuard is onboard as all menus and commands are there, but it doesn't work as it should.
Syslog shows wireguard activity with tries to create interface, add routes, firewall policies and the same errors as mentioned
Quote:
user.notice eop-tunnel.prewall[]: Unable to modify interface: Protocol not supported
but also I found an issue with wireguard module.
If you do modprobe wireguard:
Quote:
modprobe -vvv wireguard ; echo $?
Loading module wireguard
Using /lib/modules/3.10.108-d11/wireguard.ko
255

it's not listed in lsmod output after that and in dmesg we can see:
Quote:
<4>[12888.540000] wireguard: Unknown symbol ip_tunnel_get_stats64 (err 0)

Thanks.
BrainSlayer
Site Admin


Joined: 06 Jun 2006
Posts: 7824
Location: Dresden, Germany

PostPosted: Wed Jan 21, 2026 7:53    Post subject: Reply with quote
i will take care of it
_________________
"So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
feodim
DD-WRT Novice


Joined: 20 Jan 2026
Posts: 7

PostPosted: Fri Jan 23, 2026 19:01    Post subject: WireGuard works like a charm now on TL-941NDv3 Reply with quote
hi
At first I should say much appreciated BrainSlayer and all devs work!
TL-941NDv3 and some routers that use 3.10 kernel (including topic starter's TL-740ND) are now able to use WireGuard!
Now about "poor" performance mentioned in some post on dd-wrt forum (expected not more than 5Mbps) Smile
My router is configured as POC to provide known WiFi at some new place with WiFi access (like hotel) via VPN to ISP (WireGuard) so its the most heavy scenario as it has WISP+AP+WireGuard VPN (as mentioned its a ProofOfConcept not live to test stability and performance).
so
Quote:
Router Name: DD-WRT
Router Model: TP-Link TL-WR941ND v2/v3
Firmware Version: DD-WRT v3.0-r63461 std (01/22/26)
Kernel Version: Linux 3.10.108-d11 #215112 Thu Jan 22 10:08:29 +07 2026 mips

Quote:
System Details
CPU Model: Atheros AR9132 rev 2 (0xb9)
CPU Cores: 1
CPU Features: MIPS32r1 MIPS32r2 MIPS16
CPU Clock: 400 Mhz (304)
Dhrystones: 440.52 DMIPS

Speedtest results to different country via WireGuard over WISP:
Quote:
Latency: 38ms
Download: 18Mbps
Upload: 21Mbps

1 client in routers WiFi and several clients in WISP
Load Average at routers GUI sometimes climbed to 74% while test was running (done about 10 tests).

Will do more tests later with router connected by WAN port with cable providing WiFi to clients.

Thanks again!
feodim
DD-WRT Novice


Joined: 20 Jan 2026
Posts: 7

PostPosted: Wed Jan 28, 2026 11:18    Post subject: WireGuard works, but not like a charm :) Reply with quote
hi
Not sure if its interesting to anyone and if it will be treated as issue to be fixed Smile, but my experience after some time of using WireGuard as VPN to ISP(default route): I can say that its not stable.
As I mentioned before I did tests for bandwidth and thought that issues are due to low power of CPU (router TL-941NDv3 even rebooted sometimes).
Later after some days of rest I tried WG via ISP with online FM radio - not much traffic, but constant. I encountered dips in stream after some time (30+sec), sometimes it stopped totally and required to restart stream or change station.
Also there were couple reboots of router on its own. Load Average was always low not more than 20%.
Tried the same scenario with WireGuard tunnel disabled - router was online without any issues for a week or so with sometimes enabled the same stream of online FM radios - no any dips or stops at all during hours.
Now I updated firmware to the latest published (DD-WRT v3.0-r63485 std (01/25/26))- all the same with WireGuard enabled/disabled.

Also, suppose its an issue - no firewall rules present (just the ones I added manually via firewall commands as Security/Firewall and Administration/Management/Remote Access has no effect)?
iptables -nvL:
Quote:
┌─[✓]─[root@dd-wrt:10.10.10.30]─[~]
└─iptables -nvL
Chain INPUT (policy ACCEPT 8671 packets, 7557K bytes)
pkts bytes target prot opt in out source destination
0 0 DROP tcp -- oet2 * 0.0.0.0/0 0.0.0.0/0 multiport dports 22,23,53,80
0 0 DROP tcp -- wlan0 * 0.0.0.0/0 0.0.0.0/0 multiport dports 22,23,53,80

Chain FORWARD (policy ACCEPT 6108 packets, 3133K bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 10977 packets, 2463K bytes)
pkts bytes target prot opt in out source destination

/tmp/.ipt has rules as it should.

Thanks

Update
Reconfigured WireGuard to another ISP VPN (default route), firmware was not updated (DD-WRT v3.0-r63485 std (01/25/26)) and after 6 hours of uptime with constant online FM playback with WG enabled I can say it works like a charm Smile no any dips or stops.
So it seems just missing firewall rules is an issue.

Much appreciated BrainSlayers and devs work!


Last edited by feodim on Sat Jan 31, 2026 15:28; edited 3 times in total
numerci
DD-WRT User


Joined: 02 May 2012
Posts: 165

PostPosted: Wed Jan 28, 2026 14:25    Post subject: Reply with quote
I wander how come that Wireguard is present on WRT740N and not on Archer C7. The first has less memory and less storage.
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17413
Location: Texas, USA

PostPosted: Thu Jan 29, 2026 22:19    Post subject: Reply with quote
@numerci: Is this on either of the last two releases?

@feodim: What about iptables-nft -vnL?

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
BrainSlayer
Site Admin


Joined: 06 Jun 2006
Posts: 7824
Location: Dresden, Germany

PostPosted: Thu Jan 29, 2026 23:20    Post subject: Reply with quote
numerci wrote:
I wander how come that Wireguard is present on WRT740N and not on Archer C7. The first has less memory and less storage.


it is present on archer c7 is the the correct answer. go to setup->tunnels and just configure it

_________________
"So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
numerci
DD-WRT User


Joined: 02 May 2012
Posts: 165

PostPosted: Fri Jan 30, 2026 4:48    Post subject: Reply with quote
Ok, is there. I was looking on the VPN tab. Thanks for the tip.
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17413
Location: Texas, USA

PostPosted: Fri Jan 30, 2026 6:53    Post subject: Reply with quote
Wireguard >> DD-WRT Wiki which points to:

DD-WRT Forum Index -> Advanced Networking -> Sticky: WireGuard guides and documentation

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
feodim
DD-WRT Novice


Joined: 20 Jan 2026
Posts: 7

PostPosted: Fri Jan 30, 2026 8:38    Post subject: Reply with quote
kernel-panic69 wrote:
@feodim: What about iptables-nft -vnL?

@kernel-panic69 its 4/32 device Smile on diet. There is no nft no IPv6 etc in favor of WireGuard that is amazing decision (kill feature as for me)! Maybe in future honored BrainSlayer and devs will replace some more packages to add IPv6 if its possible at all Rolling Eyes
Quote:
┌─[✓]─[root@dd-wrt:10.10.10.30]─[~]
└─iptables
iptables iptables-restore


Thanks.


Last edited by feodim on Mon Feb 02, 2026 7:44; edited 1 time in total
numerci
DD-WRT User


Joined: 02 May 2012
Posts: 165

PostPosted: Sun Feb 01, 2026 18:00    Post subject: Reply with quote
kernel-panic69 wrote:
Wireguard >> DD-WRT Wiki which points to:

DD-WRT Forum Index -> Advanced Networking -> Sticky: WireGuard guides and documentation

It worked like a charm. Thanks.
feodim
DD-WRT Novice


Joined: 20 Jan 2026
Posts: 7

PostPosted: Mon Feb 02, 2026 8:45    Post subject: iptables based firewall issue on 4/32 devices? Reply with quote
hi
TL-WR941NDv3 with WireGuard based default route uptime is 2 days (whole weekend) - no issues so far!
I tried to manually restore iptables from /tmp/.ipt file and it failed, so missing firewall policies could be caused by that:
Quote:
┌─[✗]─[root@dd-wrt:10.10.10.30]─[~]
└─iptables-restore /tmp/.ipt
iptables-restore v1.3.7: Unknown arg `--reap'

that is in
Code:
-A SECURITY -i wlan0 -m recent --rcheck --name synflood --seconds 60 --reap
policy.
Update:
To test I removed that unsupported line from /tmp/.ipt file and tried to restore again and it also failed:
Quote:
└─iptables-restore --verbose --test --noflush /tmp/.ipt
iptables-restore v1.3.7: Couldn't find match `psd'

so it seems psd module is also missing:
Code:
-A INPUT -i wlan0 -m psd --psd-weight-threshold 15 --psd-hi-ports-weight 3 -j DROP
-A FORWARD -i wlan0 -m psd --psd-weight-threshold 15 --psd-hi-ports-weight 3 -j DROP

After removing all 3 mentioned lines restore still fails with unknown reason:
Quote:
└─iptables-restore --verbose --noflush /tmp/.ipt
#-A SECURITY -i wlan0 -m recent --rcheck --name synflood --seconds 60 --reap
#-A INPUT -i wlan0 -m psd --psd-weight-threshold 15 --psd-hi-ports-weight 3 -j DROP
#-A FORWARD -i wlan0 -m psd --psd-weight-threshold 15 --psd-hi-ports-weight 3 -j DROP
iptables-restore: line 130 failed
Line 130 is COMMIT at the end of file.
I'm not sure if it applies to only TL-941NDv3 or all 4/32 devices on diet Smile ?

Thanks!
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Qualcomm Atheros based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum