[PATCH wireguard-tools v2 0/2] ipc: linux: kernel-side device filtering

Asbjørn Sloth Tønnesen wireguard at asbjorn.st
Thu Oct 30 19:13:00 UTC 2025


Move device filtering to the kernel, thereby reducing netlink traffic.

The first patch request kernel-side filtering.

The second patch removes the old filtering code, as an
additional step, which breaks on earlier than Linux v4.6.

I assume that a dependency on Linux v4.6+ is acceptable for wg-tools
now, as wireguard-linux-compat haven't been updated for 3 years.

---
Changes:
v2:
- Added info about kernel-support to commit message
- Added another patch, for removing client-side filtering

v1: https://lists.zx2c4.com/pipermail/wireguard/2025-September/009004.html

Asbjørn Sloth Tønnesen (2):
  ipc: linux: filter netdevices kernel-side
  ipc: linux: remove user-space device filtering

 src/ipc-linux.h | 22 ++++++++--------------
 1 file changed, 8 insertions(+), 14 deletions(-)

-- 
2.51.0



More information about the WireGuard mailing list