macOS Invalid state transition

[totoCZ]

Hi,

after figuring out the utun0-9 macOS specifics, I'm not able to do a working connection.
It seems to work for a few seconds sometimes and then drops it, reconnects, etc.

The 3 peers are linux machines with 51820/udp open and I think one of them has the ICE ports open too.

CUNICU_EXPERIMENTAL=1 cunicu daemon utun5

Config:

backends:
  - grpc://cunicu.hetmer.net:443

prefixes:
  - 172.17.0.0/16
  - fd06:c1bd:da42::/48

sync_hosts: false

community: <>

private_key: <>

#interfaces:
#    utun5:
#        userspace: true

ice:
  urls:
    - stun:stun.l.google.com:19302

grep Invalid * -R
log.txt:01:11:56.049385 error epdisc.peer       Invalid state transition	intf=utun5 peer=IvLbnt6XnWNaOXIzeaimVeUjwH36gzguWoSZ106xlnM= current_state=CONNECTED new_state=CONNECTED
log.txt:01:12:06.435291 error epdisc.peer       Invalid state transition	intf=utun5 peer=j2FjZ4rKTxi0rPzQOt5aIaiQyqeCmhfRDmv39dCpMHk= current_state=CONNECTING new_state=FAILED
log.txt:01:12:26.962247 error epdisc.peer       Invalid state transition	intf=utun5 peer=IvLbnt6XnWNaOXIzeaimVeUjwH36gzguWoSZ106xlnM= current_state=CONNECTED new_state=CONNECTED
log.txt:01:12:33.187415 error epdisc.peer       Invalid state transition	intf=utun5 peer=j2FjZ4rKTxi0rPzQOt5aIaiQyqeCmhfRDmv39dCpMHk= current_state=CONNECTING new_state=FAILED
log.txt:01:13:05.026550 error epdisc.peer       Invalid state transition	intf=utun5 peer=IvLbnt6XnWNaOXIzeaimVeUjwH36gzguWoSZ106xlnM= current_state=CONNECTED new_state=CONNECTED
log.txt:01:13:17.971321 error epdisc.peer       Invalid state transition	intf=utun5 peer=SOAcy2j8onMW1Ms2wZoN5yOx6/X3F0fREqhm88Fzsm8= current_state=CONNECTING new_state=FAILED
log.txt:01:13:26.162715 error epdisc.peer       Invalid state transition	intf=utun5 peer=SOAcy2j8onMW1Ms2wZoN5yOx6/X3F0fREqhm88Fzsm8= current_state=CONNECTED new_state=CONNECTED

macOS Sonoma Public Beta
log.txt

[totoCZ]

Hmm. I removed the ICE config on the mac and one node and restarted it.
Now
reachability: RELAYED

So it seems that it's not possible to just STUN it.
But there are probably some bugs in it.
Right now the mac client only sees that one node and the other two dropped out completely.

[stv0g]

Hi @totoCZ,

thanks for testing it on macOS :) I am also running Sonoma since a few days.
The problems seems to be a bit more widespread as the userspace WireGuard tests are currently also failing (disabled in CI).

I am on it and will report once they are enabled again.

Unfortunately, the CI tests are currently only targeting Linux.