Wireguard inbound: Do not use kernel TUN (#3960)

Fangliding · RPRX · RPRX · commit b7aacd324545 · 2024-11-02T21:07:17.000Z
Co-authored-by: RPRX &lt;63339210+RPRX@users.noreply.github.com&gt;
diff --git a/proxy/wireguard/config.go b/proxy/wireguard/config.go
@@ -31,8 +31,13 @@ func (c *DeviceConfig) fallbackIP6() bool {
 }
 
 func (c *DeviceConfig) createTun() tunCreator {
+	if !c.IsClient {
+		// See tun_linux.go createKernelTun()
+		errors.LogWarning(context.Background(), "Using gVisor TUN. WG inbound doesn't support kernel TUN yet.")
+		return createGVisorTun
+	}
 	if c.NoKernelTun {
-		errors.LogWarning(context.Background(), "Using gVisor TUN.")
+		errors.LogWarning(context.Background(), "Using gVisor TUN. NoKernelTun is set to true.")
 		return createGVisorTun
 	}
 	kernelTunSupported, err := KernelTunSupported()

Original file line number	Diff line number	Diff line change
`@@ -31,8 +31,13 @@ func (c *DeviceConfig) fallbackIP6() bool {`
`31`	`31`	`}`
`32`	`32`
`33`	`33`	`func (c *DeviceConfig) createTun() tunCreator {`
	`34`	`+ if !c.IsClient {`
	`35`	`+ // See tun_linux.go createKernelTun()`
	`36`	`+ errors.LogWarning(context.Background(), "Using gVisor TUN. WG inbound doesn't support kernel TUN yet.")`
	`37`	`+ return createGVisorTun`
	`38`	`+ }`
`34`	`39`	`if c.NoKernelTun {`
`35`		`- errors.LogWarning(context.Background(), "Using gVisor TUN.")`
	`40`	`+ errors.LogWarning(context.Background(), "Using gVisor TUN. NoKernelTun is set to true.")`
`36`	`41`	`return createGVisorTun`
`37`	`42`	`}`
`38`	`43`	`kernelTunSupported, err := KernelTunSupported()`