scripte/wireguard-ui-multi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Replace wg-quick route management with idempotent PostUp routes

Browse Source 
wg-quick's own AllowedIPs route handling does a plain `ip route add`
per entry into the main table and hard-fails the whole interface
bring-up with "RTNETLINK: File exists" the moment two servers share
an overlapping AllowedIPs entry (real case: a client's transit IP
duplicated across 4 imported servers). Set Table = off and generate
`ip route replace` PostUp commands instead - idempotent, never fails
on a pre-existing route, and multiple servers can coexist even when
their peers' AllowedIPs overlap.

Also make ServerServiceRestart write the config to disk first, same
as ServerServiceStart already does - it had the same "config file
missing" failure mode.
This commit is contained in:
sysops
2026-07-25 19:53:26 +02:00
parent d585d53fa7
commit cf9c136874
3 changed files with 19 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
templates/wg.conf
+10 -2
View File
@@ -9,10 +9,18 @@ ListenPort = {{ .serverConfig.Interface.ListenPort }}
PrivateKey = {{ .serverConfig.KeyPair.PrivateKey }}
{{if .globalSettings.MTU}}MTU = {{ .globalSettings.MTU }}{{end}}
PreUp = {{ .serverConfig.Interface.PreUp }}
PostUp = {{ .serverConfig.Interface.PostUp }}
# Table is forced to "off" and routes are (re)installed explicitly below via
# `ip route replace` instead of letting wg-quick manage them with `ip route
# add`. Multiple servers on this box can legitimately share an overlapping
# AllowedIPs entry (e.g. the same /32 reachable via more than one tunnel);
# wg-quick's own route handling hard-fails the whole interface with
# "RTNETLINK: File exists" the moment two servers claim the same route,
# which used to take down every server started after the first. `replace`
# is idempotent and never fails on a pre-existing route.
PostUp = {{ .serverConfig.Interface.PostUp }}{{range .clientDataList}}{{if eq .Client.Enabled true}}{{range .Client.AllocatedIPs}}ip route replace {{.}} dev %i; {{end}}{{range .Client.ExtraAllowedIPs}}ip route replace {{.}} dev %i; {{end}}{{end}}{{end}}
PreDown = {{ .serverConfig.Interface.PreDown }}
PostDown = {{ .serverConfig.Interface.PostDown }}
Table = {{ .globalSettings.Table }}
Table = off
{{range .clientDataList}}{{if eq .Client.Enabled true}}
# ID: {{ .Client.ID }}