[GH-ISSUE #324] starting wireguard gives an error #3330

New Issue

GiteaMirror · 2026-04-20T07:15:27-05:00

GiteaMirror commented

2026-04-20 07:15:27 -05:00

Originally created by @V3rtrex on GitHub (Mar 11, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/324

So i've setup pangolin without any problems but when it comes to starting wireguard with the config that gets provided after adding a site it gives me an error that the Address is already in use.

This is what i get

Config
[Interface]
Address = 100.89.128.4/30
ListenPort = 51820
PrivateKey = nope

[Peer]
PublicKey = also no
AllowedIPs = 100.89.128.1/32
Endpoint = domain:51820
PersistentKeepalive = 5

I looked in the Docs but coulnd't find anything.

Originally created by @V3rtrex on GitHub (Mar 11, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/324 So i've setup pangolin without any problems but when it comes to starting wireguard with the config that gets provided after adding a site it gives me an error that the Address is already in use. This is what i get ![Image](https://github.com/user-attachments/assets/882a8fb1-c4b5-48e1-84b9-c3cebdbe96c1) Config [Interface] Address = 100.89.128.4/30 ListenPort = 51820 PrivateKey = nope [Peer] PublicKey = also no AllowedIPs = 100.89.128.1/32 Endpoint = domain:51820 PersistentKeepalive = 5 I looked in the Docs but coulnd't find anything.

GiteaMirror closed this issue

2026-04-20 07:15:28 -05:00

GiteaMirror commented

2026-04-20 07:15:28 -05:00

@oschwartz10612 commented on GitHub (Mar 11, 2025):

It looks like you might have another interface with the same ip 100.89.128.4/30 maybe from a previous attempt. Try to run ip a and look for a interface with that IP and if you find it you can delete it with ip link del <interfaceName>. Then try again.

@oschwartz10612 commented on GitHub (Mar 11, 2025): It looks like you might have another interface with the same ip 100.89.128.4/30 maybe from a previous attempt. Try to run `ip a` and look for a interface with that IP and if you find it you can delete it with `ip link del <interfaceName>`. Then try again.

GiteaMirror commented

2026-04-20 07:15:29 -05:00

@V3rtrex commented on GitHub (Mar 12, 2025):

well ok i found out the issue.
1 container in the stack is trying to do something with this port, this was the reason why i couldn't start wireguard but pangolin needs that docker container for wireguard or newt to work so i'm kinda confused on what to do now.

@V3rtrex commented on GitHub (Mar 12, 2025): well ok i found out the issue. 1 container in the stack is trying to do something with this port, this was the reason why i couldn't start wireguard but pangolin needs that docker container for wireguard or newt to work so i'm kinda confused on what to do now.

GiteaMirror commented

2026-04-20 07:15:29 -05:00

@oschwartz10612 commented on GitHub (Mar 12, 2025):

You have another container using port 51820? Do you have anther wireguard connection?

You can change the start_port param in the config.yml file in the Pangolin server to something other than the default wireguard port and update the port to match in your local wireguard config. Make sure to restart the stack once you have updated this value.

@oschwartz10612 commented on GitHub (Mar 12, 2025): You have another container using port 51820? Do you have anther wireguard connection? You can change the `start_port` param in the config.yml file in the Pangolin server to something other than the default wireguard port and update the port to match in your local wireguard config. Make sure to restart the stack once you have updated this value.

GiteaMirror commented

2026-04-20 07:15:29 -05:00

@oschwartz10612 commented on GitHub (Mar 12, 2025):

You should not need wireguard installed on the same VPS as gerbil. Gerbil is the wireguard peer on the VPS.

@oschwartz10612 commented on GitHub (Mar 12, 2025): You should not need wireguard installed on the same VPS as gerbil. Gerbil is the wireguard peer on the VPS.

GiteaMirror commented

2026-04-20 07:15:29 -05:00

@V3rtrex commented on GitHub (Mar 12, 2025):

So if i change the port to 51821 i'll have to change the Endpoint Port in the wireguard config from 51820 to 51821, if i understand it correctly.

@V3rtrex commented on GitHub (Mar 12, 2025): So if i change the port to 51821 i'll have to change the Endpoint Port in the wireguard config from 51820 to 51821, if i understand it correctly.

GiteaMirror commented

2026-04-20 07:15:30 -05:00

@V3rtrex commented on GitHub (Mar 12, 2025):

i'm doing this on my home server, is there something what i need to do different?

@V3rtrex commented on GitHub (Mar 12, 2025): i'm doing this on my home server, is there something what i need to do different?

GiteaMirror commented

2026-04-20 07:15:30 -05:00

@oschwartz10612 commented on GitHub (Mar 13, 2025):

Are you trying to run wireguard on the same server that is running gerbil?

@oschwartz10612 commented on GitHub (Mar 13, 2025): Are you trying to run wireguard on the same server that is running gerbil?

GiteaMirror commented

2026-04-20 07:15:30 -05:00

@V3rtrex commented on GitHub (Mar 13, 2025):

yea, I have both on the same server.

@V3rtrex commented on GitHub (Mar 13, 2025): yea, I have both on the same server.

GiteaMirror commented

2026-04-20 07:15:31 -05:00

@Lokowitz commented on GitHub (Mar 13, 2025):

I am also running Pangolin on a custom wireguard port.
You have to change the port in your docker-compose.yml

services:
  gerbil:
    ports:
     - <port>:<port>/udp

And in config/config.yml

gerbil:
    start_port: <port>

@Lokowitz commented on GitHub (Mar 13, 2025): I am also running Pangolin on a custom wireguard port. You have to change the port in your docker-compose.yml ``` services: gerbil: ports: - <port>:<port>/udp ``` And in config/config.yml ``` gerbil: start_port: <port> ```

GiteaMirror commented

2026-04-20 07:15:31 -05:00

@oschwartz10612 commented on GitHub (Mar 13, 2025):

^^^ this is correct.

But you should not need wireguard installed on the same VPS as gerbil. Gerbil is the wireguard peer on the VPS. Unless you are hosting a WG server for other purposes the wireguard client for a site in pangolin should be on your remote network. If you want to use pangolin with "local" resources on the VPS you should use "local" sites: https://docs.fossorial.io/Pangolin/without-tunneling

I would also use newt for the remote network instead of raw wireguard if you can help it: https://docs.fossorial.io/Newt/install

@oschwartz10612 commented on GitHub (Mar 13, 2025): ^^^ this is correct. But you should not need wireguard installed on the same VPS as gerbil. Gerbil is the wireguard peer on the VPS. Unless you are hosting a WG server for other purposes the wireguard client for a site in pangolin should be on your remote network. If you want to use pangolin with "local" resources on the VPS you should use "local" sites: https://docs.fossorial.io/Pangolin/without-tunneling I would also use newt for the remote network instead of raw wireguard if you can help it: https://docs.fossorial.io/Newt/install

GiteaMirror commented

2026-04-20 07:15:31 -05:00

@Kornelius777 commented on GitHub (Apr 25, 2025):

Over the last two days, I was struggeling to get newt working.
newt runs in a proxmox LXC, debian12 standard template.
The wireguard connection could only be built up after installing wireguard and wireguard-tools (and apt additionally installed a different kernel).
I didn't use or configure wireguard manually, however, after installing it, newt finally built a wireguard connection.
Looks like some dependency wasn't met, before.

Kind regards,

@Kornelius777 commented on GitHub (Apr 25, 2025): Over the last two days, I was struggeling to get newt working. newt runs in a proxmox LXC, debian12 standard template. The wireguard connection could only be built up after installing wireguard and wireguard-tools (and apt additionally installed a different kernel). I didn't use or configure wireguard manually, however, after installing it, newt finally built a wireguard connection. Looks like some dependency wasn't met, before. Kind regards,

GiteaMirror commented

2026-04-20 07:15:32 -05:00

@oschwartz10612 commented on GitHub (Apr 30, 2025):

Hum it is strange - newt should be entirely in user space and should not require Wireguard in the kernel at all.

@oschwartz10612 commented on GitHub (Apr 30, 2025): Hum it is strange - newt should be entirely in user space and should not require Wireguard in the kernel at all.

Sign in to join this conversation.

Branches Tags

main

dependabot/npm_and_yarn/npm-dependencies-93181a2a0d

dependabot/github_actions/github-actions-dependencies-6d79802a48

dependabot/go_modules/install/go-install-dependencies-3804ca7238

dependabot/docker/docker-dependencies-4faa477378

provisioning-resources

api-improvements

crowdin_dev

dev

feat/remember-last-idp-on-smart-login-form

private-resource-enable

refactor/batch-status-requests

dependabot/npm_and_yarn/multi-5f1280885e

fix/non-semver-version-error

private-resource-page

resource-launcher

backhaul

exit-node-reconnect

feat/command-palette

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/pangolin#3330