[Solved] Wireguard Issues After Upgrade

[jt-socal]

I upgraded to 24.1.  I had a road_warrior setup and two outgoing wireguard VPNs with policy based routing.  Everything has been working for years before the upgrade, but nothing works since. 

I ended up removing gateways and interfaces and removing all wireguard instances and peers.  I now cannot even create an interface without manually creating my own keys via console commands wg genpsk and wg genkey.  The gear button for "Generate New Keypair" does not work. 

I then create a peer and add it.  Then I go to interfaces, assignments, select wg1 click add and get, "The following input errors were detected:The interface "wg1" does not exist. Make sure to apply its configuration first."  So I go back to wireguard and try disabling all and enabling all again, but error repeats.
Is there something obvious I am doing wrong or any suggestions to get wireguard to work again? 

Also, when I go to the dashboard, it says, "No WireGuard instance defined or enabled."  But there is one defined and enabled.
Suggestions please. 

[newsense]

With the removal of GWs and Interfaces you might be in a world of pain now.


I'd fix it this way:

a) Make a copy of /conf folder, and any 3rd party folders you may have (like AGH as an example)

b) Install 24.1 and apply patches

c) Do a manual pkg install for everything you have in the <plugins> section in config.xml (exclude os-wireguard and os-firewall)

d) Restore the latest config from /conf/backup that you had before upgrading to 24.1

[jt-socal]

Any test I should run to debug whatt is going on to see if some in upgrade script can be improved?

Everything is working great, except wireguard.

I restored my config from backup, so I have all interfaces and gateways back. 

I'll fresh install 24.1 shortly and restore setting from backup again.

[jt-socal]

Worked, everything back to normal.

[newsense]

I think the issue is related to a GW migration script and is being looked into already.

[jt-socal]

Seemed like a wireguard issue to me.  Wireguard was unresponsive to web interface changes, the latest handshake on dashboard was blank, the "VPN/Wireguard/Diagnotics" was blank.  As another possible hint, I was getting errors under Dashboard, Interface Statistic, Road_Warrior; those are not happening anymore. 

Hope that helps, thanks for the great software,JT