Struct WireGuard

backend/wireguard/wireguard.go:42–68

WireGuard locking hierarchy — must always be acquired in this order: wg.syncMu serialises all peer sync/remove operations wg.mu guards lifecycle state (manager, state, config, version) m.mu guards Manager internals (client, configure, nl) Never acquire an outer lock while holding an

//
// Never acquire an outer lock while holding an inner one.
type WireGuard struct {
	config       *Config
	cfg          *config.Config
	manager      *Manager
	statsTracker *stats.Tracker
	peerStore    *PeerStore

	// Tickers
	updateTicker  *time.Ticker
	cleanupTicker *time.Ticker

	// Stats update config
	updateInterval time.Duration

	logChan        chan string
	cancelFunc     context.CancelFunc
	startTime      time.Time
	version        string
	mu             sync.RWMutex
	state          lifecycleState
	interfaceStats *stats.InterfaceCountersTracker
	shutdownOnce   sync.Once
	syncMu         sync.Mutex
	lastStatsErrAt time.Time
	newManager     newManagerFunc
	hostRouting    func()
}

// getWireGuardVersion fetches the wireguard-tools version
func getWireGuardVersion() string {