The Wiert Corner – irregular stream of stuff

On OpenWRT GL.iNET based devices, the WireGuard client does not restart upon reboot, even if it was started before rebooting.

Hopefully the /usr/bin/wireguard_watchdog script will help with this as others indicates it should.

My first try was no succes, but since it is supposed to run from cron it does no output. The script on GL-SFT1200 firmware version 3.215, script /usr/bin/wireguard_watchdog is different from the one in the OpenWRT repository, so it needs some investigation.

Some links for checking this out:

• [Wayback/Archive] openwrt/wireguard_watchdog at master · openwrt/openwrt of which the first commit describes to to schedule it:
  • [Wayback/Archive] wireguard-tools: add wireguard_watchdog script · openwrt/openwrt@e3faff9
    

    wireguard-tools: add wireguard_watchdog script

    This watchdog script tries to reresolve and reconnect to inactive wireguard peers.
    Use it for peers with a frequently changing dynamic IP.
    persistent_keepalive must be set, recommended value is 25 seconds.
    Run this script from cron every minute:
    echo '* * * * * /usr/bin/wireguard_watchdog' >> /etc/crontabs/root
    
    Signed-off-by: Aleksandr V. Piskunov <aleksandr.v.piskunov@gmail.com>

    Via [Wayback/Archive] Wireguard problem with resolving peer – Installing and Using OpenWrt – OpenWrt Forum

  History in two parts as the file got moved around:

  1. [Wayback/Archive] History for package/network/services/wireguard/files/wireguard_watchdog – openwrt/openwrt
  2. [Wayback/Archive] History for package/network/utils/wireguard-tools/files/wireguard_watchdog – openwrt/openwrt

  Via [Wayback/Archive] How to install wireguard_watchdog on OpenWRT – TechOverflow

• [Wayback/Archive] GL-SFT1200 firmware version 3.215, script `/usr/bin/wireguard_watchdog`
• [Wayback/Archive] List of current feature requests 2022 – Product Discussion – GL.iNet
  

  I don’t know if this is a feature request or a bug report, but addressing the current problem with Wireguard and Dynamic DNS should be high priority. It’s the only reason I bought this device. In short, wireguard connections fail when the target’s IP address changes – they are not reresolved. Due to GL-I.net 1’s custom way of handling this, the including wireguard_watchdog script fails.

  -> [Wayback/Archive] Issue with Wireguard client and Dynamic DNS – Technical Support – GL.iNet

• [Wayback/Archive] Improvement to wireguard_watchdog script? – Installing and Using OpenWrt / Network and Wireless Configuration – OpenWrt Forum
• [Wayback/Archive] **no reconnect wireguard client** – Technical Support – GL.iNet
• [Wayback/Archive] Restart WireGuard via cli – Installing and Using OpenWrt / Network and Wireless Configuration – OpenWrt Forum
• [Wayback/Archive] OpenWRT as a wireguard client – Roo’s View
  

  My ‘home’ site had some sort of network outage – the IP didn’t change, but the main gateway needed to be reboot. Either the outage, or the reboot resulted in the wireguard connection being broken.
  Using the wireguard_watchdog script that is part of the OpenWRT wireguard package seems like the right fix here. It’ll also help when/if my home IP changes.
  forum.openwrt.org/t/wireguard-problem-with-resolving-peer/40830/3
  forum.openwrt.org/t/wireguard-connection-not-being-restored/62452
  But in this case – the state is correctly detected (that wireguard needs a kick) but the attempt to use “wg set wginterface peer … ” isn’t doing the trick
  Based on forum.openwrt.org/t/restart-wireguard-via-cli/51935/10 it seems adding
  ifdown wginterface
ifup wginterface
  helped kick things and I’m good to go.

  • [Wayback/Archive] Wireguard problem with resolving peer – Installing and Using OpenWrt – OpenWrt Forum
  • [Wayback/Archive] Wireguard connection not being restored – Installing and Using OpenWrt – OpenWrt Forum

Queries:

• [Wayback/Archive] “wireguard_watchdog” gl.inet – Google Search
• [Wayback/Archive] “wireguard_watchdog” – Google Search

–jeroen

[Wayback/Archive] GL-SFT1200 firmware version 3.215, script `/usr/bin/wireguard_watchdog`

https://gist.github.com/jpluimers/f10a8dea85f6515b09e6bdb12d3ddad6