until few days ago I used 2 OpenVpn connections (client) and 1 Wireguard connection (client) on my router (openwrt 18).
For each vpn connections I don't set routing (I mean inside openvpn or wireguard configuration) because I used policy Routing or Mwan3 packages to choose right vpn connection (based for example on ip source/destination or port, etc...).
Now I would like to switch to Wireguard only but I don't be able to establish two wireguard connections (to two different peers) from my router: do you know if this is possible?
Actually on my router (Openwrt 18 on a ESXi vmware machine), I have 3 vpn connections: two are openvpn connections and one is a wireguard connections.
Each of them are connections to a VPN provider (so, are client vpn connections): I need this cfg to maximize vpn performance (my cpu limit and/or vpn provider limit).
For each of these, I have not configured routing-features, so
for openvpn connections, I set option route_nopull '1'
for wireguard connection, I set allowed_ips to "0.0.0.0/0" but I don't set "route allowed ips"
I am using policy-routing (thanks Stangri) to use a specific vpn connection for my clients: so, for example, a specific client uses openvpn1, another client uses openvpn2, a third client wireguard1, a fourth client uses directly wan connection.
Now I would like to switch to Wireguard only connections but when I am unable to startup second wireguard connection to a different peer (both have "0.0.0.0/0" allowed ips): like lleachii said, I think that's the problem.
Wireguard interfaces doesn't establish a connection after router's reboot or restart interface
I no sure if is possible to get 2 different wireguard interfaces (I don't use server on my router) with "0.0.0.0/0" as allowed ips to different peers
For the first, I don't think it is an error on my configuration because after many stop/restart/reboot, wireguard interface works: for the second I don't be able to do serious tests until I resolve the first.
I start to think the problem can be on my vpn provider (mullvad): maybe I could try another provider that supports wireguard.
I tried again and this time, with 2 working wireguard interfaces (wg01 and wg02):
rebooted router: both interfaces are up and running immediately
shutdown the router, waited 1 hour, then startup: only wg01 is up and running immediately, wg02 is down
Wg02 was down for more than 2 hours, but now, after 2 hours and 20 minutes, is working again.
I can't understand where the problem is.
P.S: To verify that a specific wireguard interface is running (in a router with two or more wg interfaces, configured without "route allowed ips"), also without VPR/Mwan3 packages, I think it is enough to see interfaces page on luci and see the difference between RX/TX number of packets (thanks to wireguard's persistent keep alive): am I right?