github-starred/pangolin
2
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-05-22 17:43:04 -05:00
Code Issues 959 Packages Projects Releases 74 Wiki Activity

[GH-ISSUE #3105] Public ressource gets degraded if wireguard is added to the list of ressource sites #17297

New Issue
Open
opened 2026-05-18 17:47:07 -05:00 by GiteaMirror · 2 comments
GiteaMirror commented 2026-05-18 17:47:07 -05:00
Owner
Copy Link

Originally created by @voidblack on GitHub (May 18, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/3105

Describe the Bug

I have a public resource with a multi-failover configuration: WireGuard, Newt, and Newt-Systemd. As soon as I add WireGuard to the public resource, performance degrades. This seems to be because the WireGuard site does not support health checks

Image Image

Environment

  • OS Type & Version: Debian 13
  • Pangolin Version: 1.18.4 (CE)
  • Gerbil Version: 1.4.0
  • Traefik Version: 3.7.1
  • Newt Version: 1.12.5

To Reproduce

Add wireguard and newt site.
Add newt and wireguard to public ressource.
Visit Resources > Public page.
Ressource degrades.

Expected Behavior

Health Column should reflect the health status of sites if they provide thiese checks and should stay healthy even if a wireguard site is added that does not support health checks.

Originally created by @voidblack on GitHub (May 18, 2026). Original GitHub issue: https://github.com/fosrl/pangolin/issues/3105 ### Describe the Bug I have a public resource with a multi-failover configuration: WireGuard, Newt, and Newt-Systemd. As soon as I add WireGuard to the public resource, performance degrades. This seems to be because the WireGuard site does not support health checks <img width="1572" height="581" alt="Image" src="https://github.com/user-attachments/assets/b8ee853b-95be-4a50-b034-3a2c3891fe21" /> <img width="1567" height="657" alt="Image" src="https://github.com/user-attachments/assets/d14e3d52-0b35-4bda-a86d-87ededea01e0" /> ### Environment - OS Type & Version: Debian 13 - Pangolin Version: 1.18.4 (CE) - Gerbil Version: 1.4.0 - Traefik Version: 3.7.1 - Newt Version: 1.12.5 ### To Reproduce Add wireguard and newt site. Add newt and wireguard to public ressource. Visit Resources > Public page. Ressource degrades. ### Expected Behavior Health Column should reflect the health status of sites if they provide thiese checks and should stay healthy even if a wireguard site is added that does not support health checks.
GiteaMirror commented 2026-05-18 17:47:08 -05:00
Author
Owner
Copy Link

@AstralDestiny commented on GitHub (May 18, 2026):

Well healthcheck is to just pull that specific resource out of the pool, It's not really failover as it is telling traefik (pangolin) "All 3 of these are valid for traefik randomly select any of the 3" though if it's jellyfin you should be using sticky sessions if you haven't already enabled that..

Healthchecks aren't solely to watch if the service is up or down (cosmetically or status wise) it's only to check if it's up and if it's down it's removed from the load balancer pool.

When you say degrades can you be more specific?

(Edit sorry was responding from a client that I can't see images on) Mmm well that will need to be fixed but pangolin doesn't do failover at all as traefik is in WRR (Weighted round robin) So just distributes across all so at any given time 2 of those will be hitting a random entry in there optionally preferring higher but not guaranteed.

<!-- gh-comment-id:4477583135 --> @AstralDestiny commented on GitHub (May 18, 2026): Well healthcheck is to just pull that specific resource out of the pool, It's not really failover as it is telling traefik (pangolin) "All 3 of these are valid for traefik randomly select any of the 3" though if it's jellyfin you should be using sticky sessions if you haven't already enabled that.. Healthchecks aren't solely to watch if the service is up or down (cosmetically or status wise) it's only to check if it's up and if it's down it's removed from the load balancer pool. When you say degrades can you be more specific? (Edit sorry was responding from a client that I can't see images on) Mmm well that will need to be fixed but pangolin doesn't do failover at all as traefik is in WRR (Weighted round robin) So just distributes across all so at any given time 2 of those will be hitting a random entry in there optionally preferring higher but not guaranteed.
GiteaMirror commented 2026-05-18 17:47:08 -05:00
Author
Owner
Copy Link

@AstralDestiny commented on GitHub (May 18, 2026):

As for heatlh check the healthcheck is done within newt so a raw wireguard wouldn't be able to do that..

<!-- gh-comment-id:4477603116 --> @AstralDestiny commented on GitHub (May 18, 2026): As for heatlh check the healthcheck is done within newt so a raw wireguard wouldn't be able to do that..
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
api
authentication
bug
config
dependencies
docker
documentation
enhancement
good first issue
help wanted
Improvement
Look Into
needs investigating
networking
new feature
non-critical bug
potential bug
pull-request
Mirrored from GitHub Pull Request
 question
reverse proxy
Security
stale
ui
wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#17297
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?