OPNSense 21.1.4 and wg0 interface

[fields987]

I've already contacted Sunny Valley about this, but thought I'd post here also. After updating to 21.1.4, it appears that Sensei can't read the ip of my wg0 (Wireguard) interface. The packet engine wont start. At Sunny Valley's direction, I removed wg0 from protected interface, and the packet engine starts and runs fine. Looking through the archive logs, I can see where it reads the tunnel interface ip just in 21.1.3, but in 21.1.4, it fails and wont start the service.

[sos_opnsense]

Yep - same issue here. Thanks for reporting it, and hopefully a fix appears soon, so my WG clients can have the benefits of sensei!

[sy]

Hi all,

We determined the problem and working on it. The patch will be shipped asap.

[mb]

Problem seems to be related to wg(4) on 21.1.4 is missing POINTTOPOINT interface flag. Sensei's interface initialization was reliant on this flag to determine if a particular interface is a point to point interface. I guess this change is due to the recent improvements to the wireguard subsystem.

We'll ship a package handling this case momentarily.

UPDATE: 1.8.2 packages built and awaiting final test results. Release planned for tomorrow.

[fields987]

The 1.8.2 patch fixed the issue with the wg0 interface for me. Thanks for the quick turnaround!

[mimugmail]

Problem seems to be related to wg(4) on 21.1.4 is missing POINTTOPOINT interface flag. Sensei's interface initialization was reliant on this flag to determine if a particular interface is a point to point interface. I guess this change is due to the recent improvements to the wireguard subsystem.

We'll ship a package handling this case momentarily.

UPDATE: 1.8.2 packages built and awaiting final test results. Release planned for tomorrow.

Are you in touch with Franco and Jason about it?

[mb]

@mimugmail, no need for now. We've already shipped 1.8.2 handling this situation. New wg(4) does not seem to be a pointtopoint interface.

[Giant850]

I'm using Sensei 1.8.2, with the WG0 kernel module and my network interface stats in Sensei isn't showing any packets in/out. Did 1.8.2 only fix it for user space WG and not kernel module WG?

[mb]

Hi @Giang850,

Please see this message:

https://forum.opnsense.org/index.php?topic=22577.msg107427#msg107427