Hi. On Tue, Jul 20, 2021 at 03:46:48AM -0400, Bob Bernstein wrote: > /var/log/kern.log contains these lines: > > Jul 19 09:15:38 debian kernel: [69157.444725] wireguard: module verification > failed: signature and/or required key missing - tainting kernel
It's an out-of-tree module, so this is expected. Moreover, it tells you that it's a self-built unsigned module, which is expected if you happen to use dkms. > Principal symptom: pervasive slowdown of all connections to remote > hosts, notice first with my smtp smart host. It has nothing to do with the kernel module status. I'd blame your ISP first, and the code quality of kernel module second. I.e. if you're seeing large amounts of CPU eaten by the kernel - the kernel module is likely the problem (although it needs to be verified by perf top). If not - you'll just waste your time upgrading to next version of wireguard. Reco