Wireguard altering DSCP on payload

Installing and Using OpenWrt Network and Wireless Configuration
1

Hi All,

I have a Wirguard tunnel which is conveying some VoIP apps. These apps set their packets DSCP values to "EF Expedited Forwarding".
I expect the DSCP values to be their when the packets are transiting out of the tunnel, which is not the case.
Is there an option to change this behavior?
I have read somewhere that this is possible starting with kernel 5.7 is that correct?

I do not want Wireguard to replicate the DSCP on the encrypted packet (which is apparently a security issue), I want it to not alter the payloads DSCP....

2

Do I understand correctly that the payload is modified and not only encapsulated? Could you share an example or point to a source/bug report/documentation?

3

Yes, you have this correctly. Payload gets the DSCP set to 46 and once coming out of the tunnel has another value.
I will provide tcpdump output later.