22.7.2 Wireguard service won't start

[somebod3983]

After the upgrade to 22.7.2 the wireguard service no longer starts, I try to manually start it though the web gui and it refuses. I'm using the wireguard-go package, also notice there's a wireguard-tools package I'm assuming both of these are needed they're both installed anyway.

I should also add that it was working in prior versions, I've scoured the log files trying to find any information on why its refusing to start but I've not found anything in the system logs in webgui, is this a bug has anyone else had this problem?

[ProximusAl]

I upgraded to 22.7.2 and my Wireguard was fine, but I do however use Wireguard-kmod not go.

[somebod3983]

I've seen the error message about that but I've no idea how to remove the wireguard-go module there's no uninstall option for that package in the GUI.

[mimugmail]

Via CLI:

/usr/local/etc/rc.d/wireguard restart

And post the output.
Maybe your previous OPN version was quite old?

[Vesalius]

@somebod3983 all you need to do to use the WireGuard kernel module is run the command below at the OPNsense cli. No need to uninstall go. May need to restart the service to reestablish any ongoing connections. All current peers and setting in the WireGuard settings gui will be used without any others action needed.

Code: [Select]

pkg install wireguard-kmod

[somebod3983]

Firstly it seems the problem was a misunderstanding about how the allowed ip's works on the server configuration, the documentation from wireguard is less than clear about this. I removed the extra ip's and the service now starts.

I was after a way of configuring clients to use a split tunnel so that only traffic bound for IP's accessible on the VPN would go through the VPN rather than all traffic, I thought the allowed ip's did that but as it turns out the client has to configure that.

[jclendineng]

@somebod3983 all you need to do to use the WireGuard kernel module is run the command below at the OPNsense cli. No need to uninstall go. May need to restart the service to reestablish any ongoing connections. All current peers and setting in the WireGuard settings gui will be used without any others action needed.

Code: [Select]

pkg install wireguard-kmod

Im assuming the FW needs rebooted after this? Also wireguard go service fails to start, assuming that's OK as kmod is running and everything works just fine.

[Vesalius]

Im assuming the FW needs rebooted after this? Also wireguard go service fails to start, assuming that's OK as kmod is running and everything works just fine.

I do not remember on the first question, sorry.

Yes on the second question, that is the expected behavior. If the Red/stopped WireGuard-Go status bothers you on the dashboard services widget (it did bother me) you can click the edit (pencil) button for that widget and specify that wireguard-go status is no longer shown. Out of sight, out of mind was my fix.