Wireguard inbound: Do not use kernel TUN (#3960)

Co-authored-by: RPRX <[email protected]>
XTLS · Nov 2, 2024 · 539b641 · 539b641
1 parent 4ec5c78
commit 539b641
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/proxy/wireguard/config.go b/proxy/wireguard/config.go
@@ -31,8 +31,13 @@ func (c *DeviceConfig) fallbackIP6() bool {
 }
 
 func (c *DeviceConfig) createTun() tunCreator {
+	if !c.IsClient {
+		// See tun_linux.go createKernelTun()
+		errors.LogWarning(context.Background(), "Using gVisor TUN. Inbound doesn't support kernel TUN yet.")
+		return createGVisorTun
+	}
 	if c.NoKernelTun {
-		errors.LogWarning(context.Background(), "Using gVisor TUN.")
+		errors.LogWarning(context.Background(), "Using gVisor TUN. NoKernelTun is set to true.")
 		return createGVisorTun
 	}
 	kernelTunSupported, err := KernelTunSupported()