1.18 Wireguard is disconnected

[yeraycito]

With the new update zenarmor prevents the wireguard connection, disabling the WG interface in zenarmor solves the problem, if you re-enable wireguard it connects but after a few minutes it disconnects again. All this can be seen in the Opnsense widget:

[jphylips]

I see similar behavior. I disabled WG for now.

[hfvk]

I have two firewalls which both are running 1.18 on OPNsense 24.7.7.

Wireguard is working without issues on both systems.

[jphylips]

Just to verify. Zenarmor is checking the wireguard interface?

[user998282312]

I used Wireguard and was suprised why my home opnsense-instance wasn't responding anymore. So if one is depending on WG for remote purposes, disabling zenarmor seems to be the only solution?

[Taunt9930]

Have those affected sent feedback/logs via the Zenarmor UI? What did the dev team say?

[ruuskil]

Same problem here. I removed the wireguard interface from my zenarmor settings and now I'm able to connect again. Hopefully they get it fixed soon.

[Taunt9930]

Same problem here. I removed the wireguard interface from my zenarmor settings and now I'm able to connect again. Hopefully they get it fixed soon.

Did you send feedback/logs to Sunneyvalley through the UI? Have you had any feedback from them?

[ruuskil]

Did you send feedback/logs to Sunneyvalley through the UI? Have you had any feedback from them?

I did but haven't heard back yet. I added a link to this thread in my message so hopefully they come here for the comments.

[sy]

Hi,

Actually, it couldn*t be reproduced. We need to investigate with logs. We have contacted us who sent the logs. I ask for to use "Have Feedback" check all checkboxes.

[ruuskil]

Pros for ZA support for being active also during the weekend. I was contacted and their proposal was a remote session for investigating the problem but I'm not willing to do that. As a home user this issue is not critical to me since the WG connection works when it's removed from ZA settings.

I hope someone from this thread will be able to work further with ZA to reproduce the issue.

[wirefall]

I think I had this problem, too. Right after 24.7.7 update WG stops to work. I always saw a 124kb received from WG/OPNsense (e.g. on my iPhone), then it stops.

However, after some restarts this problem is just gone. WG works as expected and I haven't touched anything. Strange.

See here: https://forum.opnsense.org/index.php?topic=43653.0
So maybe it is not related to Zenarmor?

[ruuskil]

I think I had this problem, too. Right after 24.7.7 update WG stops to work. I always saw a 124kb received from WG/OPNsense (e.g. on my iPhone), then it stops.

However, after some restarts this problem is just gone. WG works as expected and I haven't touched anything. Strange.

See here: https://forum.opnsense.org/index.php?topic=43653.0
So maybe it is not related to Zenarmor?

In this case it must be connected to Zenarmor because it started when ZA updated to 1.18. And the problem goes away when the WG interface is removed from ZA settings.

[wirefall]

I haven't changed anything in Zenarmor, WG interfaces have always been in. WG works again after 2 restarts, for over 2 days now reliable. However there was definitely something wrong with WG right after update, all connections to quite some peers outside were broken.

As I haven't changed any setting (only restarting), this keeps to be strange...

[sy]

Hi All,

We have reproduced the issue and investigating. I will update as soon as possible about the issue again. Thanks for your understanding and patience.