Wireguard for windows: routes are added even if remote server not reachable

Wireguard for windows: routes are added even if remote server not reachable

[Jean Cardona]

Hello, 

When wireguard on windows cannot reach the server, it still sets up the routes defined in allowedIPs, with a very large priority because the windows wireguard virtual interface is configured as a 100GB interface.
This is an issue for us, because when one of our user is in the office, the VPN cannot connect but windows still tries to use it to reach some internal subnets and those subnets are thus unreachable.

Is there a way to remove the routes if the VPN cannot come up?

Best regards, 

-- 
Jean Cardona

Re: Wireguard for windows: routes are added even if remote server not reachable

[Jason A. Donenfeld]

You can adjust the route metric using `PostUp`, if you need:
https://git.zx2c4.com/wireguard-windows/about/docs/adminregistry.md

But having WireGuard automatically _shutoff_ due to unreachability
sounds like something with DoS security implications, so we're
unlikely to add that to the client. However you might be able to
trigger various rules to enable or disable WireGuard using other OS
facilities. https://git.zx2c4.com/wireguard-windows/about/docs/enterprise.md
may help.

Jason