[PATCH wireguard-tools v4 0/3] ipc: linux: kernel-side netdevice filtering

Asbjørn Sloth Tønnesen ast at fiberby.net
Thu Mar 12 21:43:58 UTC 2026


Move device filtering to the kernel, thereby reducing netlink traffic.

The first patch request kernel-side filtering.

The second patch removes the old filtering code, as an
additional step, which breaks on earlier than Linux v4.6.

The third patch requests that the kernel doesn't include statistics
in netdevice dumps.

This bumps the minimum supported Linux kernel version to v4.6.

---
Changes:
v4:
- Remove #ifdef RTEXT_FILTER_SKIP_STATS.
- Sync changes to the embeddable C library.
- Now that Linux v4.6+ is fine, swap the order of patch 2 and 3.
- Dusted of the commit messages a bit.

v3: https://lists.zx2c4.com/pipermail/wireguard/2026-January/009471.html
- Added patch to set RTEXT_FILTER_SKIP_STATS
- Re-worked commit messages a bit.

v2: https://lists.zx2c4.com/pipermail/wireguard/2025-October/009080.html
- Added info about kernel-support to commit message
- Added another patch, for removing client-side filtering

v1: https://lists.zx2c4.com/pipermail/wireguard/2025-September/009004.html


Asbjørn Sloth Tønnesen (3):
  ipc: linux: filter netdevices kernel-side
  ipc: linux: remove user-space netdevice filtering
  ipc: linux: skip statistics on netdevice listing

 contrib/embeddable-wg-library/wireguard.c | 23 +++++++++--------------
 src/ipc-linux.h                           | 23 +++++++++--------------
 2 files changed, 18 insertions(+), 28 deletions(-)

-- 
2.53.0



More information about the WireGuard mailing list