Bandwith graph does not show Wireguard tunnel RX numbers on a R7000 2025.5 AIO (CTF disabled)

[kuzyn]

I have a server (192.168.1.211) that has all its traffic routed through a FT Wireguard tunnel named wg0. The tunnel is up, there is no error or strange logs, and I am quite sure that this traffic is actually routed properly (see config screenshots --- traceroute from the server also seems to confirm). However, when I go to the bandwidth FT section on the router, no traffic shows up as going through wg0. The traffic shows up in other places as expected (wan0, lan1, eth0, wl1, wl2, vlan1).

Is this a known bug or limitation? Thanks for all the hard work

---

[pedro0311]

This is the same problem as on the Wireguard Status page: only sent bytes are counted, and this is a kernel problem.
On your Bandwidth page you can see (for wg0): "TX /.../ Total 418.55MB", so only RX is not counted.

BTW:
Should the router (from which you're showing screenshots) forward all traffic through the 192.168.1.211 server? If so, set "Redirect Internet Traffic" to "All."
If not, the PBR should only contain the "To Destination IP" entry from the server's IP. "From Source IP" applies only to devices connected to the LAN side of this router (i.e., the client's).

[kuzyn]

Thank you for clearing this up. As for the routing bit, thanks also for the insight as I think I don't have the correct mental model the routing.

Effectively, I want only all traffic from and to 192.168.1.211 (which is a server on the LAN side) to use an external VPN. Nothing else on the LAN should use the tunnel. My thinking was this required strict routing both "from" and "to". If I remove the "from" rule, the server at 192.168.1.211 connects to the internet using my WAN IP rather than the VPN's. Is this config problematic?

(This is an aside to my original question, so feel free to close too.)