wireguard-tools/src/uapi, branch masterRequired tools for WireGuard, such as wg(8) and wg-quick(8)https://git.zx2c4.com/wireguard-tools/atom/src/uapi?h=master2026-03-24T02:22:51Zipc: windows: support incremental allowed ips updates2026-03-24T02:22:51ZJason A. DonenfeldJason@zx2c4.com2026-03-24T02:22:51Zurn:sha1:06a99cce2c9998f53eb30d2f258a9e5ff286445b
Following the Linux case, now support the same API on Windows.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
global: bump copyright2026-03-21T11:20:43ZJason A. DonenfeldJason@zx2c4.com2026-03-21T11:20:43Zurn:sha1:997ffa0c89b4a6a3998325ceeb55588bb0cf8017
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
ipc: linux: support incremental allowed ips updates2025-05-20T20:03:58ZJordan Rifejordan@jrife.io2025-05-17T19:29:51Zurn:sha1:0788f90810efde88cfa07ed96e7eca77c7f2eedd
Extend the interface of `wg set` to leverage the WGALLOWEDIP_F_REMOVE_ME
flag, a direct way of removing a single allowed ip from a peer,
allowing for incremental updates to a peer's configuration. By default,
allowed-ips fully replaces a peer's allowed ips using
WGPEER_REPLACE_ALLOWEDIPS under the hood. When '+' or '-' is prepended
to any ip in the list, wg clears WGPEER_F_REPLACE_ALLOWEDIPS and sets
the WGALLOWEDIP_F_REMOVE_ME flag on any ip prefixed with '-'.
$ wg set wg0 peer <PUBKEY> allowed-ips +192.168.88.0/24,-192.168.0.1/32
This command means "add 192.168.88.0/24 to this peer's allowed ips if
not present, and remove 192.168.0.1/32 if present".
Use -isystem so that headers in uapi/ take precedence over system
headers; otherwise, the build will fail on systems running kernels
without the WGALLOWEDIP_F_REMOVE_ME flag.
Note that this patch is meant to be merged alongside the kernel patch
that introduces the flag.
Signed-off-by: Jordan Rife <jordan@jrife.io>
[Jason: removed linux ifdefs; this will eventually come to other platforms too. minor style nits.]
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
ipc: freebsd: move if_wg path to reflect new in-tree location2022-10-29T01:51:47ZKyle Evanskevans@FreeBSD.org2022-10-29T01:45:05Zurn:sha1:7b2ae7aa2f52fbac65874a641cbfbb0182d0ba46
When we re-added if_wg to the tree, we changed directories in dev to
strip the if_ (we don't use this prefix for other interfaces'
directories). Adjust it here as a convenience, so that when we import
wireguard-tools to FreeBSD the path will just work as-is with our usual
build.
Signed-off-by: Kyle Evans <kevans@FreeBSD.org>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
ipc: windows: use devpkey instead of nci for name2021-07-30T23:01:53ZJason A. DonenfeldJason@zx2c4.com2021-07-30T22:39:58Zurn:sha1:52597c351554ec7f39c0817d45771d1f30572f4b
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
ipc: add wireguard-nt support2021-07-20T11:24:18ZJason A. DonenfeldJason@zx2c4.com2021-06-23T13:43:39Zurn:sha1:f65c82456d4acdf96f3c0ce769bcecb61550f367
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
ipc: freebsd: add initial FreeBSD support2021-03-11T22:02:07ZJason A. DonenfeldJason@zx2c4.com2021-03-11T03:24:40Zurn:sha1:f51349c52b8d343f8e7d63015415516771b884dc
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
ipc: openbsd: switch to array ioctl interface2020-05-13T07:55:32ZJason A. DonenfeldJason@zx2c4.com2020-05-13T06:37:46Zurn:sha1:56cb39fb225e284c21d3a33efeb84eff1fd94798
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
ipc: cleanup openbsd support2020-05-11T04:10:02ZJason A. DonenfeldJason@zx2c4.com2020-05-10T06:24:46Zurn:sha1:d4a32c97fd0953acfe18ce4eb3bdea8b33af1d23
We also add a wg_if.h in the fallback include path.
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
global: bump copyright2020-01-02T18:52:25ZJason A. DonenfeldJason@zx2c4.com2020-01-02T18:52:25Zurn:sha1:d8230ea0dcb02d716125b2b3c076f2de40ebed99
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>