Questions tagged [wireguard]
The wireguard tag has no usage guidance.
354
questions
0
votes
1
answer
28
views
Can't resolve private domains using bind9 with Wireguard VPN connection
I have a VPS with static external IP and Ubuntu 22.04. I configured the Wireguard VPN connection to my server tunneling all traffic through VPS. I also have UFW enabled. I want to resolve some domains ...
0
votes
0
answers
12
views
Performance problems when running Wireguard between Linux virtual machines. Same config on physical hosts works fine
I’m running into performance problems with Wireguard tunnels running between two virtual machines on the same hypervisor (running under Qemu/KVM) and I would greatly appreciate any insights/advice ...
- 1
0
votes
0
answers
25
views
RouterOS 7: Configure the Wireguard server to support connections by different WAN access IP
RouterOS 7 router with two WAN ports, WAN2 and WAN3(I can access Winbox with both of these WAN IPs without any issues), and set up a Wireguard (WG) service. I can successfully connect to WG by the ...
- 699
-1
votes
0
answers
31
views
Setting up tunneling for docker containers
I want to use wireguard to restrict access to my containers. I have a couple of services running on the host (which is behind a NAT) and has the IP 192.168.206.35.
So I setup wireguard and able to ...
- 17
0
votes
0
answers
36
views
Portforwarding Wireguard setup
I setup wireguard on a VPS to use it as a VPN to enable portforwarding for various uses like gaming and NAS setup.
I want to open port 45000, 56000 and 40000 for now.
I am on Ubuntu 22.4 on 27fiber ...
- 1
0
votes
0
answers
53
views
Adding static route between two VPN servers
I have two VPN servers (Wireguard and OpenVpn) and my goal is that the clients connected to both the servers should be able to communicate between them. Say laptop A is connected to wireguard VPN ...
- 101
0
votes
0
answers
29
views
Wireguard VPN not allowing connections
so I have wireguard setup on my linux server and im trying to connect to it on my windows machine. Here is the config i am using to connect to it on my windows machine.
[Interface]
PrivateKey = hidden
...
0
votes
1
answer
67
views
Wireguard/iptables: ICMP response not forwarded to wg0
Network diagram: Laptop (10.8.0.2) -> (wireguard) -> server A (10.8.0.1, 10.10.0.10) -> server B (10.10.0.20)
sequence diagram
I've connected my laptop (10.8.0.2) to a server A (10.8.0.1) via ...
- 9
0
votes
1
answer
48
views
Multiple wireguard interfaces each using the 'real' interface directly, and through either be able to reach any IP
I'm in need of setting up multiple wg-quick interfaces on a single machine, both using the real ethernet NIC directly, independently.
The issue I appear to be hitting is that through each of these I ...
- 313
0
votes
0
answers
66
views
Is there a way to get the IP address of the interface on the other end of a wireguard tunnel?
Server 1 is the Wireguard server (listening). Its Wireguard interface wg0 interface IP is 10.100.100.1.
Server 2 is a Wireguard client connecting via the Internet to server 1. Its Wireguard interface ...
- 409
-3
votes
1
answer
73
views
How to connect to a IPsec VPN with WireGuard client?
is it possible at all, because I know that you can't do this with openconnect?
I have:
gateway ip
preshared key
login
password
empty ipsec id (group)
- 115
0
votes
0
answers
31
views
Wireguard peer rejecting traffic
My Wireguard setup randomly stopped working yesterday and I don't know how to trace the source of the problem.
I inspected the traffic with Wireshark and it shows that the traffic gets sent from the ...
0
votes
0
answers
59
views
Wireguard Docker and Verizon optic router
This is likely a very trivial issue answered multiple times but my knowledge is not enough to recognize/implement.
Problem:
I can connect to my self-hosted wireguard server and access admin panel ...
- 101
0
votes
1
answer
123
views
Ping and mDNS over WireGuard not working
When running through WireGuard VPN tunnel from outside the network, I can access machines inside directly via IP. For example, hitting IP of PiHole box in a browser returns the PiHole UI. I can also ...
0
votes
1
answer
43
views
Routing traffic between A and C using A-B wireguard's network
I'm having some difficulties setting up a routing between 3 nodes. Here's the situation:
A, B and R are wireguard (wg0) peers
R is a public hub (vpn.example.com) with IP 172.0.0.1
A is a peer ...
- 43
0
votes
0
answers
33
views
iptables - How do I restrict access to just local devices on the network?
I have asked this question on SuperUser but the only response was from someone who I was unable to understand
I have a WireGuard VPN Server running on a Debian 12 host with no problems, listening on a ...
2
votes
2
answers
226
views
Forwarding VPS Traffic over WireGuard
So I've been pulling my hair out for the last 24 hours to sort this out.
Long-story-short, my home internet runs over a 4G Mobile network, so this means I cannot Port Forward through my main Router. I ...
- 31
0
votes
1
answer
55
views
Re-route all incoming traffic to my home computer over the wireguard interface
I have setup a server in AWS with WireGuard server installed on it. I configured the server and the client and the vpn connection is up and running. I am able to ping from my local computer to the ...
- 117
0
votes
0
answers
33
views
Wireguard aside IPSec site to site
I have the following scenario: Connecting to a server (A) through another server (B). My connection to B is via ssh normally. The connection between B and A is through ssh, but via VPN with Wireguard.
...
- 101
1
vote
0
answers
85
views
WireGuard: how to have a persistent network card on Windows?
With OpenVPN, the virtual network card is persistent. This allow easy routing/config/whatever. This also allow TCP connections not to drop in case of VPN restart.
With WireGuard, the virtual network ...
- 1,673
1
vote
1
answer
66
views
WireGuard default route in AWS ECS container
I have a container inside an AWS ECS instance.
I want to establish a connection to a WireGuard server from that container.
The connection itself works but I have issues with routing all the traffic ...
- 111
0
votes
0
answers
242
views
Wireguard Site-to-Site connection in Docker ping working but TCP not
I am quite desperate. I am trying to get my site-to-site vpn setup working, but no luck so far. Please don't judge me, I am quite new to the routing problematic.
I have a VPS with a public IP 123.456....
- 1
0
votes
1
answer
114
views
WireGuard config protection
I want to set up WireGuard in the corporate network instead of OpenVPN. How can the client's config be protected from theft or loss? If the client's config falls into the wrong hands, then attackers ...
- 1
0
votes
1
answer
93
views
UDP Port Forwarding
I got 2 servers Named A and B, both are in different data centers and just have internet access.
I need the incoming UDP connections to a particular port on server A to be forwarded to a specific port ...
- 1
0
votes
0
answers
107
views
IP routing between two sites and allowing external access to both via Wireguard
I have two Proxmox notes, in two separate locations. They are connected via a Wireguard Tunnel between the two sites (A and B). This tunnels all traffic destined for the other site through the tunnel ...
0
votes
1
answer
576
views
Connecting to remote host that has same IP network as local network fails
I have a home automation host installed at a remote location which I access through WireGuard VPN. The router at the remote location uses 192.168.1.x, which is the same network as my home router. I ...
- 11
0
votes
0
answers
145
views
Handshake for peer 13 (x.x.x.x:51820) did not complete after 20 attempts, giving up
Server Config:
[Interface]
Address = 10.8.0.1/24
SaveConfig = true
PostUp = ufw route allow in on wg0 out on ens3
PostUp = iptables -t nat -I POSTROUTING -o ens3 -j MASQUERADE
PreDown = ufw route ...
- 1
0
votes
0
answers
139
views
Am I able to use Pritunl Wireguard without their client? Where are the connection settings stored?
I installed Pritunl and wireguard packages on my VPS. Then I made WG server settings with this manual.
Now I want to connect to the server but without pritunl client, only using wireguard standard ...
- 11
0
votes
1
answer
173
views
IP Routing Questions (Wireguard as Company Network, Hetzner Private Network as Server Private Network)
(educational purposes)
Hey Guys,
actually i'm trying to create a company network (employee clients) with wireguard. Lets say its the subnet 10.0.0.0/24. The Wireguard Server is a Hetzner Cloud server, ...
- 11
0
votes
1
answer
166
views
Limit connections to private network with firewalld and wireguard in point to site
I am trying to limit VPN access to a private network running in Openstack. The wireguard server is inside the private network and the traffic is routed to its private ip address from Openstack.
Inside ...
- 103
0
votes
0
answers
37
views
Why is there still traffic to destinations other than the peer address when a wireguard tunnel is active?
Backstory:
I've set up my firewall rules to prevent traffic from leaking outside of the wireguard vpn tunnel, because it happened before that the wg interface was active, but there was no active ...
- 1,473
0
votes
2
answers
227
views
NAT for Debian based WireGuard router in Hetzner cloud
I have rented several cloud servers from Hetzner. These are all on a private network (10.20.20.0/24), with only one server of them even having a public IP.
Following this German tutorial, I want to ...
0
votes
0
answers
135
views
Wireguard setup for 1 "master" and many client groups?
I need to separate my Wireguard clients into groups/subnets, but I need one "master-group" (subnet) that can reach all clients.
10.11.2.0/24 BestPizzaShop-Town1
10.11.3.0/24 ...
- 101
0
votes
0
answers
184
views
Is this a bad way to avoid host isolation with WireGuard?
Background
I am adding support for WireGuard VPN to an embedded device. The user will be able to set the AllowedIPs configuration themselves. WireGuard uses the allowed IPs to set routes on the host,...
- 101
0
votes
0
answers
104
views
How to select packets in iptables in nested IPIP tunnel?
I have IPIP tunnel as shown in tcpdump output bellow: IP 192.168.240.112 > 192.168.250.112.
Inside this tunnel, there is a traffic in another IPIP tunnel IP 10.233.86.94.35938 > 10.233.100.199....
- 579
0
votes
1
answer
2k
views
How do I set up Wireguard in Docker with lan access
I'm trying to set up a VPN server with wireguard.
I have the following setup in docker compose:
version: "3.1"
services:
wireguard:
image: linuxserver/wireguard
cap_add:
- ...
- 183
0
votes
0
answers
78
views
Wireguard-ui: `Bad PATH_INFO : /login`
I've successfully installed Wireguard + UI to a Debian11 VPS with this AIO script.
But if I open the http://localhost:5000 via Webmin tunneling, I get this error:
Bad PATH_INFO : /login
How do I fix ...
- 101
0
votes
0
answers
100
views
Passphrase wireguard/Firezone
I created different users through firezone to use wireguard vpn. So I have the user, and the "device" in which I define the accessible IPs, and the DNS to use.
But to make things even more ...
1
vote
0
answers
42
views
Allow forwarding only between VPN clients within the same subnet mask
I am using Wireguard (interface wg0) for a VPN on a server, where all connected clients have IPv6 addresses assigned by the server (controlled by AllowedIPs).
Let's say we have three clients:
Client ...
- 279
0
votes
0
answers
662
views
No Connection with Pivpn wireguard lxc Container on a proxmox host
Describe the issue
I can't connect to anything. Not the internet nor the local network
Expected behavior
I want if my device is connected to the wireguard vpn to surf the web and to access every ...
- 1
1
vote
0
answers
728
views
Wireguard - Clients need to make many attempts to connect before receiving data back
I have a vanilla wireguard configuration - a cloud VPS running Centos stream is the server, and the clients in question are MacOS and an iOS iphone.
Often when attempting to connect after a long ...
- 11
1
vote
0
answers
469
views
Wireguard not working on linux ubuntu
I have setup a vpn server in my house using pivpn and wireguard on a raspberry and I want to connect to it when I'm away.
I have generated the wireguard configuration which is working on all my ...
- 121
3
votes
1
answer
404
views
Enabling wireguard log messages with secure boot / kernel lockdown enabled
On fedora 37, I am trying to enable kernel log messages for wireguard by executing this command in a root-shell:
echo module wireguard +p > /sys/kernel/debug/dynamic_debug/control
Unfortunately, ...
- 4,163
0
votes
0
answers
518
views
DNS query refused when connected to WireGuard/pfSense
I'm using pfSense with OpenVPN for more a decade now. Also intensively used many services from pfSense (DNS resolver, DHCP, HA Proxy, SquidGuard, firewall of course...) In short - I do have some ...
- 259
0
votes
0
answers
225
views
Cloudflare's warp is using same private ip(172.16.0.2) for all of it clients
I know cloudflare is using boringtun for warp service.
But how it use same address for all of clients, is it boringtun feature?
- 1
1
vote
1
answer
177
views
Whitelist cgroup from wireguard VPN
I have a wireguard VPN, setup and enabled through NetworkManager, called wg0. I want to allow a program to access the internet directly without going through the tunnel. For this I’m trying to match ...
- 183
0
votes
0
answers
213
views
Forward Wireguard traffic to another port
I have installed Wireguard on server A with below configuration:
[Interface]
Address = 172.16.0.1/24
ListenPort = 51820
PrivateKey = <server private key>
# Firewall rules
PostUp = iptables -A ...
- 41
0
votes
0
answers
86
views
Script to stop and start firewalld at boot
I have a ticketing system website connecting to a back-end database on my LAN through a Wireguard VPN tunnel. The front end web server is an Ubuntu 20.04.6 LTS VPS and if I reboot the server (which is ...
- 13
1
vote
0
answers
310
views
How to limit Wireguard bandwidth
I have Debian 11 server with installed Wireguard with wg0 interface and 3 peers. Server bandwidth speed is 100 MBit and traffic is around 500 GB per month.
What I need is: these 3 peers can use 100 GB/...
- 11
1
vote
2
answers
1k
views
Cannot connect to Samba share via VPN
I have a Wireguard site-to-site VPN that connects successfully.
I can ping the remote Samba server using it's IP address 192.168.30.1
I cannot access a share over the VPN tunnel using its IP address \...
- 677