7
5
Fork
You've already forked apple
1

macOS WireGuard doesn't reconnect after suspend #596

Open
opened 2026年06月04日 11:00:37 +02:00 by efef · 1 comment
Member
Copy link

Seems since 4.0.7 (and maybe 4.0.6) after suspend WireGuard doesn't always seem to connect.
It might be related to "Block all incoming connections" is enabled in macOS firewall, but the VPN (/Applications/eduVPN.app/Contents/PlugIns/TunnelExtension-macOS.appex) is explicit allowed, so in the past there was no issue.

In Connection log:

2026年06月04日 09:04:15.094 Network change detected with satisfied route and interface order [en9, en9, utun8, en0]
2026年06月04日 09:04:15.094 Routine: receive incoming v6 - stopped
2026年06月04日 09:04:15.094 Routine: receive incoming v4 - stopped
2026年06月04日 09:04:15.095 UDP bind has been updated
2026年06月04日 09:04:15.095 Routine: receive incoming v4 - started
2026年06月04日 09:04:15.095 peer(NKrI...arBc) - Sending keepalive packet
2026年06月04日 09:04:15.095 Routine: receive incoming v6 - started
2026年06月04日 09:04:26.663 peer(NKrI...arBc) - Retrying handshake because we stopped hearing back after 15 seconds
2026年06月04日 09:04:26.664 peer(NKrI...arBc) - Sending handshake initiation
2026年06月04日 09:04:31.772 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 2)
2026年06月04日 09:04:31.773 peer(NKrI...arBc) - Sending handshake initiation
2026年06月04日 09:04:36.996 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 3)
2026年06月04日 09:04:36.997 peer(NKrI...arBc) - Sending handshake initiation
2026年06月04日 09:04:41.928 peer(NKrI...arBc) - Retrying handshake because we stopped hearing back after 15 seconds
2026年06月04日 09:04:42.253 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 2)
2026年06月04日 09:04:42.253 peer(NKrI...arBc) - Sending handshake initiation
2026年06月04日 09:04:47.488 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 3)
2026年06月04日 09:04:47.488 peer(NKrI...arBc) - Sending handshake initiation
2026年06月04日 09:04:52.802 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 4)
2026年06月04日 09:04:52.802 peer(NKrI...arBc) - Sending handshake initiation
2026年06月04日 09:04:56.978 peer(NKrI...arBc) - Retrying handshake because we stopped hearing back after 15 seconds
2026年06月04日 09:04:57.924 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 2)

The double "en9" interface is weird and am seeing this on other devices too.

Have disabled "Block all incoming connections" in firewall to experience if this "solves" the issue.

Seems since 4.0.7 (and maybe 4.0.6) after suspend WireGuard doesn't always seem to connect. It might be related to "Block all incoming connections" is enabled in macOS firewall, but the VPN (/Applications/eduVPN.app/Contents/PlugIns/TunnelExtension-macOS.appex) is explicit allowed, so in the past there was no issue. In Connection log: 2026年06月04日 09:04:15.094 Network change detected with satisfied route and interface order [en9, en9, utun8, en0] 2026年06月04日 09:04:15.094 Routine: receive incoming v6 - stopped 2026年06月04日 09:04:15.094 Routine: receive incoming v4 - stopped 2026年06月04日 09:04:15.095 UDP bind has been updated 2026年06月04日 09:04:15.095 Routine: receive incoming v4 - started 2026年06月04日 09:04:15.095 peer(NKrI...arBc) - Sending keepalive packet 2026年06月04日 09:04:15.095 Routine: receive incoming v6 - started 2026年06月04日 09:04:26.663 peer(NKrI...arBc) - Retrying handshake because we stopped hearing back after 15 seconds 2026年06月04日 09:04:26.664 peer(NKrI...arBc) - Sending handshake initiation 2026年06月04日 09:04:31.772 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 2) 2026年06月04日 09:04:31.773 peer(NKrI...arBc) - Sending handshake initiation 2026年06月04日 09:04:36.996 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 3) 2026年06月04日 09:04:36.997 peer(NKrI...arBc) - Sending handshake initiation 2026年06月04日 09:04:41.928 peer(NKrI...arBc) - Retrying handshake because we stopped hearing back after 15 seconds 2026年06月04日 09:04:42.253 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 2) 2026年06月04日 09:04:42.253 peer(NKrI...arBc) - Sending handshake initiation 2026年06月04日 09:04:47.488 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 3) 2026年06月04日 09:04:47.488 peer(NKrI...arBc) - Sending handshake initiation 2026年06月04日 09:04:52.802 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 4) 2026年06月04日 09:04:52.802 peer(NKrI...arBc) - Sending handshake initiation 2026年06月04日 09:04:56.978 peer(NKrI...arBc) - Retrying handshake because we stopped hearing back after 15 seconds 2026年06月04日 09:04:57.924 peer(NKrI...arBc) - Handshake did not complete after 5 seconds, retrying (try 2) The double "en9" interface is weird and am seeing this on other devices too. Have disabled "Block all incoming connections" in firewall to experience if this "solves" the issue.
Collaborator
Copy link

I do see this with TCP (ProxyGuard). @efef Do you see this only with TCP as well?

@jwijenbergh Is there a log for the proxy server?

I do see this with TCP (ProxyGuard). @efef Do you see this only with TCP as well? @jwijenbergh Is there a log for the proxy server?
Sign in to join this conversation.
No Branch/Tag specified
master
use_common_api
issue_eduvpn_apple_527
developer_id_distribution
internal-3.0.4-i
debug/debug_block_local
bugfix/376
feature/tests
bump-versions
experimental
fix-swiftlint-warnings
redesign
mergetest
feature/289
use-gplv3-with-app-store-exception
release/2.1.7
tunnelkit_keep_tunnel_when_network_is_down
feature/254
feature/includeall
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.1.0
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.9
2.1.7
release/lets-connect-2.1.7-mac
release/lets-connect-2.1.7-ios
ios/v.2.0.1
ios/v2.0.2
ios/v2.0.3
ios/v2.0.4
ios/v2.1.1
mac/v2.1.1
v2.0.4
v2.0.2
v2.0.3
v2.0.0
v2.0.1
v1.0.0
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/apple#596
Reference in a new issue
eduVPN/apple
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?