{"record":{"id":"40ddb69e0e3a99ef","repo":"slackhq/nebula","slug":"entry-gateway-in-tun-unsafe-routes-v-via-v-is","errorCode":null,"errorMessage":"entry .gateway in tun.unsafe_routes[%v].via[%v] is not present","messagePattern":"entry \\.gateway in tun\\.unsafe_routes\\[(.+?)\\]\\.via\\[(.+?)\\] is not present","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"overlay/route.go","lineNumber":231,"sourceCode":"\t\tcase string:\n\t\t\tviaIp, err := netip.ParseAddr(via)\n\t\t\tif err != nil {\n\t\t\t\treturn nil, fmt.Errorf(\"entry %v.via in tun.unsafe_routes failed to parse address: %v\", i+1, err)\n\t\t\t}\n\n\t\t\tgateways = routing.Gateways{routing.NewGateway(viaIp, 1)}\n\n\t\tcase []any:\n\t\t\tgateways = make(routing.Gateways, len(via))\n\t\t\tfor ig, v := range via {\n\t\t\t\tgatewayMap, ok := v.(map[string]any)\n\t\t\t\tif !ok {\n\t\t\t\t\treturn nil, fmt.Errorf(\"entry %v in tun.unsafe_routes[%v].via is invalid\", i+1, ig+1)\n\t\t\t\t}\n\n\t\t\t\trGateway, ok := gatewayMap[\"gateway\"]\n\t\t\t\tif !ok {\n\t\t\t\t\treturn nil, fmt.Errorf(\"entry .gateway in tun.unsafe_routes[%v].via[%v] is not present\", i+1, ig+1)\n\t\t\t\t}\n\n\t\t\t\tparsedGateway, ok := rGateway.(string)\n\t\t\t\tif !ok {\n\t\t\t\t\treturn nil, fmt.Errorf(\"entry .gateway in tun.unsafe_routes[%v].via[%v] is not a string\", i+1, ig+1)\n\t\t\t\t}\n\n\t\t\t\tgatewayIp, err := netip.ParseAddr(parsedGateway)\n\t\t\t\tif err != nil {\n\t\t\t\t\treturn nil, fmt.Errorf(\"entry .gateway in tun.unsafe_routes[%v].via[%v] failed to parse address: %v\", i+1, ig+1, err)\n\t\t\t\t}\n\n\t\t\t\trGatewayWeight, ok := gatewayMap[\"weight\"]\n\t\t\t\tif !ok {\n\t\t\t\t\trGatewayWeight = 1\n\t\t\t\t}\n\n\t\t\t\tgatewayWeight, ok := rGatewayWeight.(int)","sourceCodeStart":213,"sourceCodeEnd":249,"githubUrl":"https://github.com/slackhq/nebula/blob/dd8f660c0ac37903ec4080ca4d3c861ba9342ceb/overlay/route.go#L213-L249","documentation":"Configuration validation error in parseUnsafeRoutes for the multi-gateway form of tun.unsafe_routes. When a route's 'via' is a list of gateway maps, each map must contain a 'gateway' key; this fires when one of those maps omits it, meaning the gateway address for that multipath route entry is unspecified and no route can be built for it.","triggerScenarios":"Thrown at overlay/route.go:231 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Add gateway: <IP> to each via list element"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"dd8f660c0ac37903ec4080ca4d3c861ba9342ceb","analyzedAt":"2026-09-03T11:13:55.444Z","contentChangedAt":"2026-09-03T11:13:55.444Z","schemaVersion":2},"datasetVersion":"2026-09-10T17:17:09.494Z"}