pub fn bring_up_node_wireguard(
config: &NodeWgPeerConfig,
) -> Result<IpAddr, NodeWgPeerError>Expand description
Creates the node↔C2 WireGuard peer.
Allowed IPs and the installed route are only the C2 tunnel host.
Linux: ip link add type wireguard, and a failed ip is an error.
Windows, no tun on the machine: one adapter and a host route for the peer.
Windows, a tun already owns the default route: no adapter and no route.
The WireGuard session runs in this process and its UDP leaves through that tun.