Hello,

When setting up a WireGuard tunnel as Always-on VPN and verifying it works, it stops working after a reboot. In order to make it work again, it must be disconnected and reconnected manually in either Android settings or WireGuard app.

I am not sure whether this is a WireGuard or Android/LineageOS bug, but Always-on VPN works fine with OpenVPN.

Environment:

Device: Nexus 5X
OS: LineageOS 15.1 (Android 8.1.0)
WireGuard app version: 1.0.20210506

Steps to reproduce:

1. Setup a new tunnel in WireGuard app and enable it
2. Verify the tunnel works
3. Set WireGuard as Always-on VPN in Android settings (i.e. Settings > Network > Internet > VPN)
4. Reboot device

Expected behavior:

VPN tunnel should work normally.

Actual behavior:

VPN tunnel doesn't work. Log extract:

05-26 11:56:50.068  6186  6327 D WireGuard/GoBackend/pluto: peer(i8Gy…i2D8) - Sending handshake initiation
05-26 11:56:50.069  6186  6327 E WireGuard/GoBackend/pluto: peer(i8Gy…i2D8) - Failed to send handshake initiation: no known endpoint for peer
05-26 11:56:55.168  6186  6327 D WireGuard/GoBackend/pluto: peer(i8Gy…i2D8) - Handshake did not complete after 5 seconds, retrying (try 10)

Attached are WireGuard app's log and configuration.

Thank you.