Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wireguard fails after reboot (2.8.0)

    Scheduled Pinned Locked Moved General pfSense Questions
    17 Posts 4 Posters 305 Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S Offline
      stephenw10 Netgate Administrator
      last edited by

      They would not be a concern if they appeared once after upgrading. But if they are being continually logged that's problem. Likely something did not upgrade correctly. Usually I would suspect Wireguard itself but you have reinstalled it multiple times.
      What other packages do you have installed there?

      B 1 Reply Last reply Reply Quote 0
      • B Online
        Buffalo0207 @stephenw10
        last edited by Buffalo0207

        @stephenw10 Here is the list of all the packages I have installed...

        1. acme
        2. Avahi - not enabled as I have recently installed mDNS-Bridge
        3. Cron
        4. mDNS-Bridge
        5. nut
        6. pfBlockerNG-devel
        7. Service_Watchdog
        8. sudo
        9. System_Patches
        10. Wireguard

        Except for Avahi, all other packages are enabled and configured and seem to be working ok.

        In case you need this info too, here are all the services that I have running...

        1. dpinger
        2. kea-dhcp4
        3. kea-dhcp6
        4. mdns-bridge
        5. miniupnpd
        6. ntpd
        7. nut
        8. pfb_dnsbl
        9. pfb_filter
        10. radvd
        11. sshd
        12. syslog
        13. unbound
          14 - wireguard

        Would you like me to send you my configuration file download?

        1 Reply Last reply Reply Quote 0
        • stephenw10S Offline
          stephenw10 Netgate Administrator
          last edited by

          Do you see any errors when you reinstall WG?

          If you look in /conf you should see the pkg_log file for fro the last install.

          B 1 Reply Last reply Reply Quote 0
          • M Offline
            Misterb @Buffalo0207
            last edited by

            @Buffalo0207 Try restarting dpinger followed by starting wireguard.

            B 1 Reply Last reply Reply Quote 0
            • B Online
              Buffalo0207 @Misterb
              last edited by

              @Misterb Thanks - that semi worked. Although WG still stops after a reboot, by restarting dpinger, I no longer need to reinstall the WG package as the 'restart service' tab works.

              M 1 Reply Last reply Reply Quote 0
              • B Online
                Buffalo0207 @stephenw10
                last edited by

                @stephenw10 The only errors I see are the php errors.

                pkg_log_pfSense-pkg-WireGuard.txt

                1 Reply Last reply Reply Quote 0
                • stephenw10S Offline
                  stephenw10 Netgate Administrator
                  last edited by

                  Hmm, when it stops and fails to start when you try to start it manually do you see anything logged then?

                  I can't replicate that on anything I have here.

                  Try running pkg upgrade and see if it offers any upgrades. Something may not have upgraded.

                  B 1 Reply Last reply Reply Quote 0
                  • B Online
                    Buffalo0207 @stephenw10
                    last edited by Buffalo0207

                    @stephenw10 When it stops and fails to start and then I try to start it manually there are no new pkg_log files. The WG pkg_log file remains on the date 13/08/25. Even when I reinstall the WG package, the log remains the same.

                    I did, however, get the following error...

                    check_upgrade: "Updating repositories metadata" returned error code 1 @ 2025-08-16 00:22:12

                    BTW - yesterday, I reinstalled all 10 packages, in case something hadn't installed correctly.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S Offline
                      stephenw10 Netgate Administrator
                      last edited by

                      Yes you won't see anything in the pkg_log, that only covers the pkg install, but I'd expect to see something logged in the main log. For example when I restart it I see in the main log:

                      Aug 16 02:15:46 	php-fpm 	77985 	/status_services.php: The command '/usr/local/etc/rc.d/wireguardd stop' returned exit code '1', the output was ''
                      Aug 16 02:15:47 	kernel 		wg0: changing name to 'tun_wg0'
                      Aug 16 02:15:47 	kernel 		tun_wg0: link state changed to UP
                      Aug 16 02:15:47 	php_wg 	19350 	/usr/local/pkg/wireguard/includes/wg_service.inc: Gateway, none 'available' for inet6, use the first one configured. 'GIF0_TUNNELV6' 
                      

                      If any of those things failed with an error I'd expect to see that there too.

                      B 1 Reply Last reply Reply Quote 0
                      • M Offline
                        Misterb @Buffalo0207
                        last edited by

                        @Buffalo0207 The problem seems to be remarkably similar to one discussed in 2023 Wireguard Site-to-Site Gateways disabled after reboot - service not starting

                        1 Reply Last reply Reply Quote 0
                        • B Online
                          Buffalo0207 @stephenw10
                          last edited by

                          @stephenw10 Can you tell me exactly where the main log is and I will download it for you. I also have WinSCP, so can access it from there if this is easier.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.