24.1.2 Wireguard does not work after updating

[apoorva]

I am on 24.1.2 and i am experiencing wireguard trouble.  about twice a day my wireguard stops working.  i am using the android app and pass everything through to my opnsense box.  once it stops working i have to go into the opnsense gui and restart the wireguard service.  it then starts working for about another half a day or so.

i am not sure what other info is needed to help me diagnose/fix so please let me know and i will provide. 

thank you all!

[jayess]

I'm wondering if this might be related to the issues I've been seeing with Suricata 7:

https://forum.opnsense.org/index.php?topic=38989.0

For people who are having trouble with Wireguard since the 24.1.2 update, can you SSH into your OPNSense box and check /var/log/suricata/eve.json to see if Suricata is dropping your Wireguard traffic?

[apoorva]

i can give this a try.  what am i looking for?

[newsense]

I am on 24.1.2 and i am experiencing wireguard trouble.  about twice a day my wireguard stops working.  i am using the android app and pass everything through to my opnsense box.  once it stops working i have to go into the opnsense gui and restart the wireguard service.  it then starts working for about another half a day or so.

i am not sure what other info is needed to help me diagnose/fix so please let me know and i will provide. 

thank you all!

Did you try disconnecting/reconnecting the phone's WG app instead - without touching the FW ?

[mimugmail]

i can give this a try.  what am i looking for?

Just disable Suricata if you have it enabled and look what happens :)

[apoorva]

I am on 24.1.2 and i am experiencing wireguard trouble.  about twice a day my wireguard stops working.  i am using the android app and pass everything through to my opnsense box.  once it stops working i have to go into the opnsense gui and restart the wireguard service.  it then starts working for about another half a day or so.

i am not sure what other info is needed to help me diagnose/fix so please let me know and i will provide. 

thank you all!

Did you try disconnecting/reconnecting the phone's WG app instead - without touching the FW ?

yes. toggling that on the phone wireguard app does not work. i have had to restart the service in opnsense.

[RamSense]

I think this could not be related to this opnsense/wireguard version. I have had this months ago.
I solved this by adding in VPN-Wireguard-Settings-Peers:

Keepalive interval = 25

hope that helps in your situation also.

[Monju0525]

Having the same wireguard issues with too.

[KevinFinnerty]

Also having wg issues here but only with my single site-to-site tunnel.

No issues immediately after the upgrade, the next day intermittent connection loss that progressively got worse. Initiated a reboot at the remote site and now the tunnel just won't establish at all.

My wg road warrior setup seems to be functioning ok though...

[schnipp]

It looks like different issues and configurations are discussed in this thread. Can anybody tell me whether wireguard is stable in Opnsense 24.1.2_1?

[Patrick M. Hausen]

I have three firewalls with various WireGuard tunnels running 24.1.2_1. All are working perfectly fine.

That does not in any way guarantee that your experience won't be different, though. Also I am running neither Suricata nor Zenarmor.

[KevinFinnerty]

Strangely, my issue seems to have resolved itself after a power outage. I assume the reboot is what fixed it... I had already tried a full reboot though and no config changes have been made.

[schnipp]

I have three firewalls with various WireGuard tunnels running 24.1.2_1. All are working perfectly fine.

That does not in any way guarantee that your experience won't be different, though. Also I am running neither Suricata nor Zenarmor.

Thanks for your report. I have upgraded to Opnsense 24.1.2_1 this morning. No issues with wireguard till now (I am also not using Suricata or Zenarmor).

[alex3003]

Hello everyone,

since the update to 24.1.2 I have also had some problems.

Wireguard connection is established, I can access the Opnsense network with my cell phone.
The connection to the remote firebox is still established, but I can't access any devices.

The Wireguard app is also faulty in the extensions.

The 3cx telephone system also has DNS problems.

Does anyone have a solution?

How to get back to firmware 23?

[Patrick M. Hausen]

Wireguard is part of the base system now. Got to System > Firmware > Status and pick "reset all local conflicts" or some such from the menu in the bottom right.