Wireguard - changes the default route although not configured

    Hi, guys, and thanks for all of your work on this.

    One suggestion -- you should add one note to the Wiki: Although the "preshared key" is optional, if a preshared key isn't used, the entire line must be deleted. If the line is present, but no key is supplied, the Wireguard instance will fail.

    I wasted several hours before I figured this out, and I know others have as well.

    Quote from Tahurel

    It seems like that the Host i.e Host = 185.210.30.121 in the example tutoral, cannot be a DDNS name. How come?

    You're configurating a network interface not an application. NICs route traffic based on IP data and you're basically defining a static IP route to the other end of the tunnel. If you want to handle DDNS hostnames you need something at application level to resolve the hostname to an IP and update the WireGuard config. ConnMan watches the config files; I'm not sure if it can adjust the tunnel routing while the connection is active or it needs to stop/restart the connection first (should be simple to test though).

    Quote from laurent734

    5:I ran:

    iptables-save >/storage/.config/iptables/rules.v4 to make it permanent

    6: I then activated the personalized firewall in the graphical interface and restarted

    after these steps I still had dns leaks.

    I therefore configure a fixed ip with the 1st dns 10.2.0.1 and the second pihole.

    Could somebody clarify what laurent734 meant by "I configured a fixed IP with the 1st DNS"? Sadly he doesn't seem to be posting here, so I doubt he'll be able to help.

    This subject is beyond my understanding but I can type code that is in front of me.

    Raspberry pi4, libreelec, kodi, openvpn, nord vpn. My issue is my fiber optic speed is 500Mbps but with the vpn service on I only get about 150Mbps, turn it off and I get my 500Mbps. Searching for a resolve I found that Wireguard is superior and much faster. My goodness the install process is quite involved. All I want is vpn on my setup that will get me closer to my available speed. Can I achieve that with Wireguard or are there other options to openvpn?

    Thanks in advance for your assistance.

    Quote from hammyj

    This subject is beyond my understanding but I can type code that is in front of me.

    Raspberry pi4, libreelec, kodi, openvpn, nord vpn. My issue is my fiber optic speed is 500Mbps but with the vpn service on I only get about 150Mbps, turn it off and I get my 500Mbps. Searching for a resolve I found that Wireguard is superior and much faster. My goodness the install process is quite involved. All I want is vpn on my setup that will get me closer to my available speed. Can I achieve that with Wireguard or are there other options to openvpn?

    Thanks in advance for your assistance.

    Your problem is OpenVPN. That protocol is old and does not allow for higher speeds. As you have noticed, turn to WireGuard instead, it's much faster.

    Mullvad announced today, that they will drop OpenVPN support early 2026.

    Removing OpenVPN 15th January 2026 | Mullvad VPN
    We are removing support for OpenVPN, it will be completely removed on 15th January 2026.
    mullvad.net

    I guess others will follow. The defacto standard VPN-Manager for Kodi at the moment is VPNManager:

    GitHub - Zomboided/service.vpn.manager: VPN plugin for Kodi
    VPN plugin for Kodi. Contribute to Zomboided/service.vpn.manager development by creating an account on GitHub.
    github.com


    They support OpenVPN only and don't seem to want to support Wireguard.

    Support for wireguard? · Issue #381 · Zomboided/service.vpn.manager
    I had a look at the wiki and in the issues, but didn't find any information: are there any plans to support wireguard-based VPNs, on top of OpenVPN ones?…
    github.com


    As Wireguard seems to be the way to go in the future, it would be very nice to see it implemented directly into LibreElec. No idea if the devs are interested to do that, but I guess many people would appreciate this step.

    • New

    I followed the guide at WireGuard | LibreELEC.wiki - especially the part "known-issues". I set my config to only route my internal network over the VPN connection - everything else should use the clients local internet breakout.

    This does not work - everything is routed through my VPN network. A short check with i.e. curl -4 icanhazip.com shows my VPN networks public IP. Traceroute to "somethingontheweb.com" tells me the same.

    Here is some log output:

    192.168.200.0 is my local network.

    192.168.4.0 is the VPN network.

    192.168.8.0 is the remote clients network.

    Any ideas?