WireGuard doesn't reload config until ifup?

I’m updating WireGuard configuration files on OpenWrt 25.12.0-rc1 in the file /etc/config/network, but the changes don’t seem to take effect immediately, I change the allowed IPs and sometimes the PSK. The interface keeps using the old config until I manually run ifup <interface> (or restart the network service entirely).

Is this expected behavior? Is there a proper way to reload/apply WireGuard config changes without bringing the interface fully down/up, or am I missing a reload mechanism specific to WireGuard on OpenWrt?

Yes, absolutely.

Nope.

Restarting the interface is needed, as all IPs and keys need to be known/loaded for any given Wireguard interface. This is WG's "Cryptokey routing" functionality.

2 Likes