Enable default route after establishing connection only

Christophe Vanlancker carroarmato0 at inuits.eu
Tue Feb 11 14:59:11 CET 2020

I think it's better to solve this at another level.

I use WireGuard on my phone, and I would rather have connections fail and me being aware of that rather than my connections working and falsely believing they are going through the tunnel.

----- Original Message -----
From: smith151 at ngs.ru
To: wireguard at lists.zx2c4.com
Sent: Tuesday, 28 January, 2020 09:50:23
Subject: Enable default route after establishing connection only

I am using default route on wireguard. And sometimes 
remote server is not acceptable. The reasons may differ - 
planned maintenance of server, internet troubles, blocked 
IPs of server by country black list an so on.

In case when wireguard server is not reachable wireguard 
client always setting default route via wg0 peer. And all 
internet traffic is not available in this case. How can I 
set up wireguard to enable default route after 
establishing connection only?

I am using wireguard v.20200121 on Debian 10 buster. The 
config file of client is very simple:

Address =
PrivateKey = ClientPrivateKey=

PublicKey = ServerPublicKey=
Endpoint =
PersistentKeepalive = 25
AllowedIPs =,::/0
WireGuard mailing list
WireGuard at lists.zx2c4.com

More information about the WireGuard mailing list