GL.iNet WireGuard "REKEY-GIVEUP" Loop - Works on Mobile but Randomly on Travel Router

[ruhansharief]

Setup:

Server: GL.iNet Router Beryl AX (Home ISP -> GL.iNet Server). LAN: 192.168.8.1.

Client: GL.iNet Travel Router Berly AX (connected to 172.x series Wi-Fi). LAN: 192.168.10.1.

VPN Protocol: WireGuard.

Status: Connects initially, I can browse and verify my Home IP, but then randomly drops and gets stuck in "Connecting" with REKEY-GIVEUP logs.

Firmware: 4.8.5 on both

What I've already tried:

1. Profiles: Verified I am using a unique Client Profile/Key for the router (different from my phone).

2. Mobile Test/laptop test: My phone connects to the same home server perfectly on the same network using its own profile.

3. MTU: Changed from 1420 to 1280 (and even lower).

4. PersistentKeepalive: Tried both 25 and 15.

5. DNS: Tried Manual (8.8.8.8), Automatic, and Home Server IP (192.168.8.1 ).

6. Kill Switch: "Block Non-VPN Traffic" is enabled (verified it works; internet dies when VPN drops).

7. Subnets: No conflict (Home 192.168.8.x, Client 192.168.10.x, WAN 172.x.x.x).

8. Hardware: AdGuard Home is OFF.

9. Port Forwarding: Correctly set up at home (UDP).

The Issue:

The connection is unstable. It will work for a few minutes, then fail. When it fails, the logs show REKEY-GIVEUP. Even after a reboot, it might connect for a moment and then drop again.

[will.qiu]

Hi,

REKEY-GIVEUP is usually related to unstable network conditions.

Please check the following:

1. Disable WireGuard on the client side, connect your phone or PC to the router, and observe whether the connection between the Beryl AX and the upstream network is stable.
2. If it is stable, try SSH into the router and run a long ping test (e.g., 50–100 packets) to check whether the connection to the server is stable:

ping {the IP address of your server}

3. Please export the logs of both router and send them via private messages, so that we can further check.

How to export logs:

How to send private messages: