Questions tagged [wireguard]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1
votes
0answers
27 views

ufw allow route in on wg0 out on wg0 to 10.0.0.6/32

I use a wireguard vpn to reversely connect to my home server via an external entry node. On that entry node, I try to add a firewall rule using ufw. Its purpose is to only allow routing to one and ...
1
vote
0answers
31 views

Mullvad VPN + Wireguard server: can't connect to my Wireguard server on Google Cloud VM

I plan to host a Wireguard server on a Google Cloud VM (Ubuntu), which is then connected to my VPN provider (In this case, Mullvad). I do this so I can install a Pi-Hole instance aswell as an Unbound ...
2
votes
0answers
43 views

WireGuard Failover for MySQL Galera Cluster

I'm setting up four servers across four locations in an attempt to create a geo-redundant MySQL Galera cluster. Two of the servers are behind NAT, and I'm currently attempting to use WireGuard to ...
1
vote
1answer
24 views

Wireguard connection fails when DNS isn't working

I had my Wireguard connection working fine, and then after some network changes it failed. DNS wasn't working, and when I fixed the address in /etc/resolv.conf, pings on my Wireguard connection ...
0
votes
0answers
55 views

Wireguard Borgbackup / SSH Stuck

I'm having issues running borgbackup over a wireguard vpn connection. The Backup used to work for a few months, but now I'm having issues making borg and sometimes my ssh sessions hang. I've checked ...
2
votes
0answers
415 views

Wireguard Unable to Complete Handshake on Android only 4G network

I have a Wireguard server on my home network which works fine on all my devices, including my phone when it's connected on Wi-Fi. The problem comes when I disconnect from the Wi-Fi and go on 4G, now ...
0
votes
0answers
106 views

WireGuard handshake fails to be received

EDIT: I figured it out, solution below. I've been attempting to set up WireGuard as a VPN gateway manually instead of using wg-quick, as I don't want to route the local machine's traffic over the ...
1
vote
1answer
104 views

Multiple wireguard tunnels to same server how to force different interfaces

I have multiple wan links on my router and I'd want a wireguard tunnel on each wan interface to the same server. I started different working tunnels to the server using different destination ports, ...
0
votes
1answer
43 views

openvpn over wireguard (Multi-cloud Plan)

I am an SRE engineer, currently working on building a hybrid cloud network and its management. Through research, I have been able to use openvpn and wireguard topology combination network proficiently....
1
vote
1answer
36 views

How to do client to client routing rules with UFW?

I would like to use UFW to control client to client access rules for a wireguard network. And I would like to do this on a central hub server. But I can't quite figure it out. Right now it works but ...
1
vote
0answers
76 views

setting up a wireguard “relay”

I have two VPN interfaces, one is my VLAN the other is an internet access. I would like to forward as if it was the default route all the internet traffic coming from the first interface to the latter....
0
votes
0answers
40 views

Forward VPN Traffic from VPN interface through SOCKS proxy to

I have a working VPN setup with Wireguard and a working SOCKS5 proxy that are running on the same server. I am trying to forward traffic from the VPN interface to the SOCKS proxy before going out to ...
1
vote
0answers
40 views

routing ppp <-> wireguard interfaces

I want to connect via wireguard to a droplet that will be running openfortivpn for connecting to a 192.168.11.0/24 network. I have confirmed that only traffic to 192.168.11.* goes through fortivpn and ...
1
vote
1answer
82 views

Does AWS Lightsail block wireguard?

For a long time now I had an AWS Lightsail VPS serving as a wireguard gateway to my home server. Since recently connection to the Lightsail instance via wireguard is no longer possible. When I took a ...
1
vote
0answers
164 views

Apache reverse proxy and wireguard

I own a VPS (ubuntu 20.04) running a VPN via Wireguard (1.0.20200513) and an Apache (2.4.41) web server, and I have a machine connected to this VPN running nextcloud (docker). The issue is that ...
0
votes
0answers
50 views

Why WireGuard server only receive SSH traffic from wg0?

I setup a WireGuard server with wg-quick on net address 10.10.1.0/24. This server, call it "S", is identified as 10.10.1.1. As a default WireGuard behavior, wg-quick up will setup an ip ...
0
votes
0answers
39 views

Routing traffic through specific interface

I do have a debian based gateway that provides internet access through two interfaces (eth0, tun0) - the later being connected to a public vpn. Some clients are routed through eth0 and some are routed ...
0
votes
1answer
58 views

nmcli connection import type wireguard writes additional default route - How to avoid it?

At start I have: [root@client ~]# ip ro | grep default default via 10.0.2.2 dev eth0 proto dhcp metric 100 When i say nmcli connection import type wireguard file /etc/wireguard/wg0.conf I get [root@...
0
votes
1answer
807 views

Wireguard tunnelling multiple clients to server and internet (allowedips)

I recently set up wireguard and had it working for one client (laptop), then adding my phone to the mix and my laptop stopped connecting. it works if I comment the other one out. I know it is due to ...
0
votes
0answers
17 views

Cannot access Winguard installed on Windows Server behind NAT

I have installed Wireguard Vers. 0.3.5 on a Windows 10 laptop and a Windows 2008R2 server. The keys are ok, as the connection is established if the laptop is on the same network as the Windows server. ...
0
votes
0answers
32 views

Connecting two networks on the same range with WireGurard

I have a problem. I need to connect two networks in the same IP range with Site-to-site VPN. Is it possible? Network #1 (n1) is 192.168.1.0/24 and network #2 (n2) is also in the same range - 192.168.1....
1
vote
1answer
156 views

Firewalld forwarding same-zone traffic from Wireguard interface, without allowing access to Host-ports

I am running a RHEL-based Linux distribution on a VPS, that is supposed to be a VPN-Gateway Server. I am using Wireguard for interconnecting Clients with each other over this Gateway. The Server has ...
1
vote
0answers
42 views

iptables allow traffic through wireguard gateway

I have a server A running as gateway for some intranet connected on eth0. A is connected to multiple "relay nodes" like B, C, D... via WireGuard. Assume here's the IP setup: Host Address A ...
1
vote
1answer
68 views

Wireguard client communication without peer key via 1 router server

I have this setup: ---server 1 config--- [Interface] Address = 10.200.200.1/24 ListenPort = 6666 PrivateKey = server_private_key [Peer] PublicKey = client1_public_key AllowedIPs = 10.200.200.2/32 ...
2
votes
0answers
134 views

Wireguard don't work with VRRP

I try to use Wireguard on a firewall with VRRP (based on Keepalived). The firewall blocks all the communications except to the VRRP address on port 51820 and the valid established connections. ...
0
votes
2answers
39 views

Why does my VPN add its own IP address range to my routing table with local gateway?

My VPN sets up my routing table with 0/1 & 128.0/1 to their gateway. However they also set the range of their data center to my local gateway. Let's say 123.456.789.123/32 routes to 192.168.1.1 ...
0
votes
0answers
47 views

WireGuard on Linux: usage of 'peer' in network configuration

For some point-to-point links we can use the peer keyword. For example when using WireGuard, a link can be specified to have a peer, but this also work without. To obtain a working WireGuard link, I ...
0
votes
1answer
112 views

WireGuard via systemd-networkd but with /etc/wireguard/wg0.conf

Is there any solution to use /etc/wireguard/wg0.conf for both, wg-quick and systemd-networkd. Following this example I have to duplicate configuration, but I want to store config in one place. How to ...
0
votes
0answers
90 views

Redirect connections from proxy server to another server via a router preserving original client's source IP

I am trying to put together a test environment for one of the products that the company I work for develops. For all effective purposes the product can be viewed as a TCP server that devices are ...
0
votes
1answer
644 views

Set VPN Connection Timeout in WireGuard

I have a WireGuard VPN server running. How do I set a timeout so that connected clients will get disconnected if they are idle for the given time (or maybe even disconnection irrespective of being ...
1
vote
1answer
672 views

Wireguard mesh between public and local network

I currently have my mesh setup like this: With the wireguard config similar to this on every node: [Interface] Address = 10.1.0.1/32 PrivateKey = ListenPort = 5888 [Peer] # example public node [1-3] ...
0
votes
0answers
344 views

WireGuard iptables forwarding

Could someone help me to figure out a weird issue? Wireguard server ip: 192.168.1.100 wg0 private address block: 192.168.4.0/24 Server with all services & (listening ports): 192.168.1.200 (10000,...
1
vote
0answers
252 views

How to configure Wireguard to allow Internet access?

I have an Ubuntu 20.04.1 LTS to host a linuxserver/wireguard Docker container. Clients can successfully connect to the Wireguard server, but I'm unable browse Internet websites on the clients while ...
0
votes
0answers
36 views

Some websites not responding on routed interface

I have an interface wg0, a WireGuard interface generated by a WireGuard client running on machineA which is connected to a server. Everything works as expected. I route traffic from wg0 to eth3 - a ...
0
votes
0answers
327 views

Wireguard very slow in Google Cloud

I installed wireguard to my google cloud instance with the same steps on this guide to ubuntu 20.04. I have 100mbps download and 5mbps upload in my home. But when I connect to the wireguard vpn. My ...
0
votes
1answer
167 views

Routing ipv6 traffic from LAN to wg0

I have ipv6 connectivity over wg0 (a WireGuard interface), and my LAN has a local ipv6 network. From a desktop (Ubuntu 20.04.1) connected to the router (Ubuntu 20.04.1) with the LAN and wg0 (WireGuard)...
1
vote
0answers
516 views

ping packet loss in wireguard UDP over TCP + UDP over socat tunnels

I have a wireguard tunnel mostly working between two Debian systems, but I had to workaround a ISP firewall (firewall X in the diagram below) that blocks everything inbound and prevents Server B from ...
2
votes
0answers
456 views

Wireguard VPN, can handshake but can't ping nor ssh

I'm building a VPN network for remote assistance and data-collection, so I've made up wireguard central server (the only peer with public and static EndPoint) and 4 clients with the same config (...
0
votes
0answers
96 views

How to get access to remote network when you connect to the server via vpn(wireguard)

I have the setup: Client which use wireguard to connect to remote server Server. which is located somewhere in the internet remote office network (which can be accessible via openvpn connection) 172....
1
vote
1answer
699 views

Configure internal groups with Wireguard VPN

I am very newbie to VPN so, be patient with me. Is it possible to get WireGuard work with config like that?: I need to create groups of pcs that can see only each other and with no access to the ...
0
votes
0answers
37 views

Wireguard peer sharing

I have the following setup: a lokal NAS server in my home network with a dynamic IP. Lets call it backup server multiple rented servers in a data center with static IPs. Lets call them server 1-x ...
4
votes
2answers
9k views

Wireguard not completing handshake

I have two Debian GNU/Linux systems (bullseye/sid), both running wireguard on port 23456, both behind NAT. Both run a kernel version > 5.6 (wireguard mainlined). System A is the server, and it ...
2
votes
1answer
5k views

Wireguard VPN can't access internet and LAN

I have a server running Ubuntu 20.04 and wireguard 1.0.20200513-1~20.04.2. I installed the wireguard app on my phone (Android Samsung S20+) and disabled WIFI and connected to 4G. When the VPN is ...
1
vote
1answer
249 views

Wireguard routing from wg1 to wg0

I have two networks configured with Wireguard. wg0 is for servers and wg1 for VPN users. When a VPN user on wg1 wants to reach the wg0 network, the packets should be router over one of the wg0 servers ...
0
votes
1answer
591 views

iptables, wireguard: 2-way routing between VPN and LAN

i am setting-up a VPN using WireGuard and are stuck configuring my firewall on the respective VPN server. I want the following features available: VPN devices (10.6.0.0/24) available from LAN (10.20....
1
vote
1answer
135 views

WireGuard: cannot delete iptables rule for default route

since I don't want friends and colleagues in my VPN to use my VPN server as a proxy VPN for "anonymous" surfing, I want to disable the default route for the VPN. In a nutshell: LAN (10.20.0....
1
vote
1answer
254 views

Kubernetes: route outgoing UDP traffic through service

My question is about Kubernetes' internal traffic routing and probably about routing / NAT in general. Goal: I'm running a Wireguard service on Kubernetes and I'd like to route all outgoing traffic ...
0
votes
0answers
24 views

DNS through VPN and WIFI, breaks system on Roaming

We have a Wireguard VPN in place to our internal network (AWS VPC). We would like to give users access to a custom DNS (*.devel.mycompany.com) within that private network. But every time the user is ...
1
vote
1answer
2k views

wireguard “destination address required” when trying to communicate from client-to-client rather than client-to-server

I have a simple wireguard network comprised of a single "server" (the only device with an externally routable ip address) and two clients. Communication between the server and the clients ...
0
votes
1answer
543 views

Wireguard on Windows: Unable to set interface addresses, routes, dns,

I have installed Wireguard on Windows 7-32bit And set the config: [Interface] PrivateKey = ********* Address = 172.22.2.2/24 DNS = 172.22.2.1 [Peer] PublicKey = ******* AllowedIPs = 0.0.0.0/0 ...