wireguard-tools/src/man, branch master

ipc: linux: support incremental allowed ips updates

2025-05-20T20:03:58Z

Extend the interface of `wg set` to leverage the WGALLOWEDIP_F_REMOVE_ME flag, a direct way of removing a single allowed ip from a peer, allowing for incremental updates to a peer's configuration. By default, allowed-ips fully replaces a peer's allowed ips using WGPEER_REPLACE_ALLOWEDIPS under the hood. When '+' or '-' is prepended to any ip in the list, wg clears WGPEER_F_REPLACE_ALLOWEDIPS and sets the WGALLOWEDIP_F_REMOVE_ME flag on any ip prefixed with '-'. $ wg set wg0 peer allowed-ips +192.168.88.0/24,-192.168.0.1/32 This command means "add 192.168.88.0/24 to this peer's allowed ips if not present, and remove 192.168.0.1/32 if present". Use -isystem so that headers in uapi/ take precedence over system headers; otherwise, the build will fail on systems running kernels without the WGALLOWEDIP_F_REMOVE_ME flag. Note that this patch is meant to be merged alongside the kernel patch that introduces the flag. Signed-off-by: Jordan Rife [Jason: removed linux ifdefs; this will eventually come to other platforms too. minor style nits.] Signed-off-by: Jason A. Donenfeld

man: set private key in PreUp rather than PostUp

2023-05-18T14:39:49Z

This is probably more sensible, since there's no point in letting traffic flow before the interface is configured. Signed-off-by: Jason A. Donenfeld

man: mention BSD debugging

2021-05-06T10:54:29Z

Signed-off-by: Jason A. Donenfeld

man: LOG_LEVEL variables changed nae

2021-01-26T22:02:37Z

Signed-off-by: Jason A. Donenfeld

man: wg-quick: use syncconf instead of addconf for strip example

2020-07-28T12:19:10Z

Signed-off-by: Jason A. Donenfeld

wg-quick: support dns search domains

2020-05-09T06:29:53Z

If DNS= has an IP in it, treat it as a DNS server. If DNS= has a non-IP in it, treat it as a DNS search domain. Signed-off-by: Jason A. Donenfeld

man: add a warning to the SaveConfig description

2020-03-05T13:10:17Z

Signed-off-by: Luis Ressel [zx2c4: slightly adjusted wording] Signed-off-by: Jason A. Donenfeld

man: backlink wg-quick(8) in wg(8)

2020-02-12T14:46:23Z

Signed-off-by: Jason A. Donenfeld

man: fix grammar in wg(8) and wg-quick(8)

2020-02-08T21:23:16Z

This fixes a few grammatical errors. Signed-off-by: Kai Haberzettl Signed-off-by: Jason A. Donenfeld

man: document dynamic debug trick for Linux

2020-01-31T22:17:59Z

This comes up occasionally, so it may be useful to mention its possibility in the man page. At least the Arch Linux and Ubuntu kernels support dynamic debugging, so this advise will at least help somebody. Signed-off-by: Jason A. Donenfeld