8
6
Fork
You've already forked windows
1

WG: Periodically reset [Peer] endpoints #267

Closed
opened 2025年05月26日 08:06:07 +02:00 by rozmansi · 1 comment
Collaborator
Copy link

When roaming out of the network that has the [Peer] Endpoint accessible over LAN (split tunnel setup), the Endpoint remains set to local IP address. This breaks the VPN tunnel connectivity and requires user reconnecting to recover the tunnel.
Reset the Endpoints of all [Peer]s either on network change detection, or periodically back to original from wg-quick profle.

When roaming out of the network that has the `[Peer]` `Endpoint` accessible over LAN (split tunnel setup), the `Endpoint` remains set to local IP address. This breaks the VPN tunnel connectivity and requires user reconnecting to recover the tunnel. Reset the `Endpoint`s of all `[Peer]`s either on network change detection, or periodically back to original from wg-quick profle.
rozmansi added this to the 4.5 milestone 2025年07月08日 16:52:15 +02:00
rozmansi removed this from the 4.5 milestone 2026年01月16日 14:59:22 +01:00
Author
Collaborator
Copy link

This works only when Endpoint are IP addresses (or if the client is caching the endpoint IP). In the scenario this attempts to fix, should the WireGuard tunnel also handle the DNS traffic, the original Endpoint value would not resolve - the tunnel is broken, WireGuard blocks all DNS servers outside the tunnel.

Closing this issue as it might break more things that it targeted to solve. And no user or organization really requested it.

This works only when `Endpoint` are IP addresses (or if the client is caching the endpoint IP). In the scenario this attempts to fix, should the WireGuard tunnel also handle the DNS traffic, the original `Endpoint` value would not resolve - the tunnel is broken, WireGuard blocks all DNS servers outside the tunnel. Closing this issue as it might break more things that it targeted to solve. And no user or organization really requested it.
Sign in to join this conversation.
No Branch/Tag specified
master
study/no-token-import
ver/3.x
govVPN
ver/3.3.0.x
ver/2.x
ver/1.x
4.6
4.5.99.8
4.5.99.7
4.5.99.6
4.5.99.5
4.5.99.4
4.5.99.3
4.5.99.2
4.5.99.1
4.5.99.0
4.5
4.4.99.4
4.4.99.3
4.4.99.2
4.4.99.1
4.4.99.0
4.4
4.3.99.1
4.3.99.0
4.3.2
4.3.1
4.3
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0
3.255.23
3.255.22
3.255.21
3.255.20
3.255.19
3.7
3.6.2
3.6.1
3.255.18
3.255.17
3.255.16
3.255.15
3.6
3.255.14
3.5
3.255.13
3.4.3
3.255.12
3.255.11
3.255.10
3.255.9
3.255.8
3.255.7
3.255.6
3.255.5
3.255.4
3.255.3
3.255.2
3.4.2
3.4.1
3.255.1
3.255
3.4
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.0.1
3.3.3
3.3.2
3.3.1
3.3
3.2.2
3.2.1
3.2
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0
2.255.6
2.255.5
2.255.4
2.255.3
2.255.2
2.255.1
2.1.4
2.255.0
2.1.3
2.1.2
2.1.1
2.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.255.11
1.255.10
1.255.9
1.0.39
1.255.8
1.255.7
1.255.6
1.255.5
1.0.38
1.255.4
1.0.37
1.255.3
1.255.2
1.255.1
1.255.0
1.0.36
1.0.34
1.0.35
1.0.33
1.0.32
1.0.31
1.0.30
1.0.29
1.0.28
1.0.27
1.0.26
1.0.25
1.0.24
1.0.23
1.0.22
1.0.21
1.0.20
1.0.19
1.0.18
1.0.17
1.0.16
audit/2017-12
1.0.15
1.0.14
1.0.13
1.0.12
1.0.11
1.0-alpha8
1.0-alpha6
1.0-alpha5
1.0-alpha4a
1.0-alpha3
1.0-alpha2a
1.0-alpha1
1.0-alpha
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/windows#267
Reference in a new issue
eduVPN/windows
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?