Component: wireguard

7.25beta5 Development 2026-Sep-16 (6 days ago)

• support comment lines in wg-import configuration files;
• treat empty private-key and preshared-key values as none;

7.23.4 Long-term 2026-Sep-03 (2 weeks ago)

• fixed peer Tx/Rx counters;
• generate port number when specified as zero;
• reinitialize socket on VRF change;

7.25beta3 Development 2026-Sep-02 (2 weeks ago)

• add the client-mtu parameter;
• allow referencing a peer by its name;
• allow unsetting the client-listen-port;
• improve error message reporting when adding a new peer;
• keep peer rx/tx counters when the peer is disabled and enabled;
• use the MTU value when importing a configuration;
• warn when an allowed-address overlaps another peer;

7.24.1 Stable 2026-Aug-21 (1 month ago)

• fix peer disable/enable state handling, which could leave the tunnel non-functional (introduced in v7.24);
• fix private key handling, including empty private keys;

7.24 Stable 2026-Aug-14 (1 month ago)

• added support for domain names in client-dns;
• added warning when allowed-address overlaps with another peer on the same interface;
• fixed peer recreation on interface change;
• fixed peer Tx/Rx counters;
• fixed wg-export comments output and case when endpoint is not set;
• fixed whitespace handling in AllowedIPs during wg-import;
• generate port number when specified as zero;
• improved wg-export to print endpoint domain name;
• improved wg-import to quietly ignore wg-quick specific keys;
• reconfigure peer only when meaningful changes are detected;
• reinitialize socket on VRF change;

7.24rc4 Testing 2026-Aug-11 (1 month ago)

• fixed peer Tx/Rx counters;
• generate port number when specified as zero;
• reinitialize socket on VRF change;

7.24rc2 Testing 2026-Jul-10 (2 months ago)

• added support for domain names in client-dns;
• added warning when allowed-address overlaps with another peer on the same interface;
• fixed wg-export comments output and case when endpoint is not set;
• fixed whitespace handling in AllowedIPs during wg-import;
• improved wg-export to print endpoint domain name;
• improved wg-import to quietly ignore wg-quick specific keys;
• reconfigure peer only when meaningful changes are detected;

7.24beta2 Development 2026-Jun-10 (3 months ago)

• fixed peer recreation on interface change;

7.23 Stable 2026-May-25 (3 months ago)

• improved system stability;

7.23beta4 Development 2026-Mar-25 (5 months ago)

• improved system stability;

7.22 Stable 2026-Mar-09 (6 months ago)

• fixed private key generation when creating a WireGuard interface;
• improved stability;
• merged upstream fixes and improvements;

7.22rc1 Testing 2026-Feb-06 (7 months ago)

• fixed private key generation when creating a WireGuard interface;

7.22beta5 Development 2026-Jan-21 (8 months ago)

• improved stability;

7.21 Stable 2026-Jan-12 (8 months ago)

• added VRF option (CLI only);
• allow to add AllowedIPs configuration for client configuration template;

7.22beta1 Development 2026-Jan-02 (8 months ago)

• merged upstream fixes and improvements;

7.21beta9 Testing 2025-Nov-25 (9 months ago)

• added VRF option (CLI only) (additional fixes);

7.21beta8 Testing 2025-Nov-13 (10 months ago)

• allow to add AllowedIPs cofiguration for client configuration template;

7.21beta4 Testing 2025-Oct-28 (10 months ago)

• added VRF option (CLI only) (additional fixes);

7.21beta2 Testing 2025-Oct-06 (11 months ago)

• added VRF option (CLI only);

7.20 Stable 2025-Sep-29 (11 months ago)

• fixed minor memory leak when IPv6 is disabled;
• improved system stability on busy devices;

7.19 Stable 2025-May-22 (1 year ago)

• add wg-import config-string parameter to import config directly from terminal;
• update peer info on "get" command;

7.19beta2 Testing 2025-Feb-28 (1 year ago)

• add wg-import config-string parameter to import config directly from terminal;
• update peer info on "get" command;

7.17 Stable 2025-Jan-16 (1 year ago)

• do not initiate handshake when peer is configured as responder;

7.17beta2 Testing 2024-Sep-27 (1 year ago)

• do not initiate handshake when peer is configured as responder;

7.15 Stable 2024-May-29 (2 years ago)

• added option to mark peer as responder only;
• added peer "name" field and display it in logs;
• do not attempt to connect to peer without specified endpoint-address;
• fixed "auto" argument usage for "private-key" and "preshared-key" settings;
• fixed performance issues showing QR code;