func NewDevice(tunDevtun.Device, bindconn.Bind, logger *device.Logger) *device.Device

func ReconfigDevice(d *device.Device, cfg *Config, logflogger.Logf) (errerror)

type Config struct {PrivateKeykey.NodePrivateAddresses  []netip.PrefixMTUuint16DNS        []netip.AddrPeers      []Peer// NetworkLogging enables network logging.// It is disabled if either ID is the zero value.// LogExitFlowEnabled indicates whether or not exit flows should be logged.NetworkLogging struct {NodeIDlogid.PrivateIDDomainIDlogid.PrivateIDLogExitFlowEnabledbool}}

funcDeviceConfig¶

func DeviceConfig(d *device.Device) (*Config,error)

funcFromUAPI¶

func FromUAPI(rio.Reader) (*Config,error)

FromUAPI generates a Config from r.r should be generated by calling device.IpcGetOperation;it is not compatible with other uapi streams.

func (*Config)Clone¶added inv1.10.0

func (src *Config) Clone() *Config

Clone makes a deep copy of Config.The result aliases no memory with the original.

func (*Config)Equal¶added inv1.90.0

func (c *Config) Equal(o *Config)bool

func (Config)PeerWithKey¶

func (configConfig) PeerWithKey(kkey.NodePublic) (Peer,bool)

PeerWithKey returns the Peer with key k and reports whether it was found.

func (*Config)ToUAPI¶

func (cfg *Config) ToUAPI(logflogger.Logf, wio.Writer, prev *Config)error

ToUAPI writes cfg in UAPI format to w.Prev is the previous device Config.

Prev is required so that we can remove now-defunct peers without having toremove and re-add all peers, and so that we can avoid writing informationabout peers that have not changed since the previous time we wrote ourConfig.

type ParseError struct {// contains filtered or unexported fields}

func (*ParseError)Error¶

func (e *ParseError) Error()string

type Peer struct {PublicKeykey.NodePublicDiscoKeykey.DiscoPublic// present only so we can handle restarts within wgengine, not passed to WireGuardAllowedIPs          []netip.PrefixV4MasqAddr          *netip.Addr// if non-nil, masquerade IPv4 traffic to this peer using this addressV6MasqAddr          *netip.Addr// if non-nil, masquerade IPv6 traffic to this peer using this addressIsJailedbool// if true, this peer is jailed and cannot initiate connectionsPersistentKeepaliveuint16// in seconds between keep-alives; 0 to disable// wireguard-go's endpoint for this peer. It should always equal Peer.PublicKey.// We represent it explicitly so that we can detect if they diverge and recover.// There is no need to set WGEndpoint explicitly when constructing a Peer by hand.// It is only populated when reading Peers from wireguard-go.WGEndpointkey.NodePublic}

func (*Peer)Clone¶added inv1.10.0

func (src *Peer) Clone() *Peer

Clone makes a deep copy of Peer.The result aliases no memory with the original.

func (Peer)Equal¶added inv1.90.0

func (pPeer) Equal(oPeer)bool