Questions tagged [wireguard]
The wireguard tag has no usage guidance.
372
questions
-3
votes
1
answer
310
views
How to connect to a IPsec VPN with WireGuard client?
is it possible at all, because I know that you can't do this with openconnect?
I have:
gateway ip
preshared key
login
password
empty ipsec id (group)
0
votes
0
answers
50
views
Wireguard peer rejecting traffic
My Wireguard setup randomly stopped working yesterday and I don't know how to trace the source of the problem.
I inspected the traffic with Wireshark and it shows that the traffic gets sent from the ...
0
votes
0
answers
98
views
Wireguard Docker and Verizon optic router
This is likely a very trivial issue answered multiple times but my knowledge is not enough to recognize/implement.
Problem:
I can connect to my self-hosted wireguard server and access admin panel ...
0
votes
1
answer
940
views
Ping and mDNS over WireGuard not working
When running through WireGuard VPN tunnel from outside the network, I can access machines inside directly via IP. For example, hitting IP of PiHole box in a browser returns the PiHole UI. I can also ...
1
vote
1
answer
438
views
Routing traffic between A and C using A-B wireguard's network
I'm having some difficulties setting up a routing between 3 nodes. Here's the situation:
A, B and R are wireguard (wg0) peers
R is a public hub (vpn.example.com) with IP 172.0.0.1
A is a peer ...
0
votes
2
answers
90
views
iptables - How do I restrict access to just local devices on the network?
I have asked this question on SuperUser but the only response was from someone who I was unable to understand
I have a WireGuard VPN Server running on a Debian 12 host with no problems, listening on a ...
2
votes
2
answers
2k
views
Forwarding VPS Traffic over WireGuard
So I've been pulling my hair out for the last 24 hours to sort this out.
Long-story-short, my home internet runs over a 4G Mobile network, so this means I cannot Port Forward through my main Router. I ...
0
votes
1
answer
549
views
Re-route all incoming traffic to my home computer over the wireguard interface
I have setup a server in AWS with WireGuard server installed on it. I configured the server and the client and the vpn connection is up and running. I am able to ping from my local computer to the ...
0
votes
0
answers
42
views
Wireguard aside IPSec site to site
I have the following scenario: Connecting to a server (A) through another server (B). My connection to B is via ssh normally. The connection between B and A is through ssh, but via VPN with Wireguard.
...
1
vote
0
answers
416
views
WireGuard: how to have a persistent network card on Windows?
With OpenVPN, the virtual network card is persistent. This allow easy routing/config/whatever. This also allow TCP connections not to drop in case of VPN restart.
With WireGuard, the virtual network ...
1
vote
1
answer
179
views
WireGuard default route in AWS ECS container
I have a container inside an AWS ECS instance.
I want to establish a connection to a WireGuard server from that container.
The connection itself works but I have issues with routing all the traffic ...
0
votes
0
answers
874
views
Wireguard Site-to-Site connection in Docker ping working but TCP not
I am quite desperate. I am trying to get my site-to-site vpn setup working, but no luck so far. Please don't judge me, I am quite new to the routing problematic.
I have a VPS with a public IP 123.456....
0
votes
1
answer
742
views
WireGuard config protection
I want to set up WireGuard in the corporate network instead of OpenVPN. How can the client's config be protected from theft or loss? If the client's config falls into the wrong hands, then attackers ...
0
votes
1
answer
417
views
UDP Port Forwarding
I got 2 servers Named A and B, both are in different data centers and just have internet access.
I need the incoming UDP connections to a particular port on server A to be forwarded to a specific port ...
0
votes
0
answers
198
views
IP routing between two sites and allowing external access to both via Wireguard
I have two Proxmox notes, in two separate locations. They are connected via a Wireguard Tunnel between the two sites (A and B). This tunnels all traffic destined for the other site through the tunnel ...
0
votes
1
answer
3k
views
Connecting to remote host that has same IP network as local network fails
I have a home automation host installed at a remote location which I access through WireGuard VPN. The router at the remote location uses 192.168.1.x, which is the same network as my home router. I ...
0
votes
0
answers
545
views
Handshake for peer 13 (x.x.x.x:51820) did not complete after 20 attempts, giving up
Server Config:
[Interface]
Address = 10.8.0.1/24
SaveConfig = true
PostUp = ufw route allow in on wg0 out on ens3
PostUp = iptables -t nat -I POSTROUTING -o ens3 -j MASQUERADE
PreDown = ufw route ...
0
votes
0
answers
336
views
Am I able to use Pritunl Wireguard without their client? Where are the connection settings stored?
I installed Pritunl and wireguard packages on my VPS. Then I made WG server settings with this manual.
Now I want to connect to the server but without pritunl client, only using wireguard standard ...
0
votes
1
answer
420
views
IP Routing Questions (Wireguard as Company Network, Hetzner Private Network as Server Private Network)
(educational purposes)
Hey Guys,
actually i'm trying to create a company network (employee clients) with wireguard. Lets say its the subnet 10.0.0.0/24. The Wireguard Server is a Hetzner Cloud server, ...
0
votes
1
answer
402
views
Limit connections to private network with firewalld and wireguard in point to site
I am trying to limit VPN access to a private network running in Openstack. The wireguard server is inside the private network and the traffic is routed to its private ip address from Openstack.
Inside ...
0
votes
0
answers
80
views
Why is there still traffic to destinations other than the peer address when a wireguard tunnel is active?
Backstory:
I've set up my firewall rules to prevent traffic from leaking outside of the wireguard vpn tunnel, because it happened before that the wg interface was active, but there was no active ...
0
votes
2
answers
512
views
NAT for Debian based WireGuard router in Hetzner cloud
I have rented several cloud servers from Hetzner. These are all on a private network (10.20.20.0/24), with only one server of them even having a public IP.
Following this German tutorial, I want to ...
0
votes
0
answers
206
views
Wireguard setup for 1 "master" and many client groups?
I need to separate my Wireguard clients into groups/subnets, but I need one "master-group" (subnet) that can reach all clients.
10.11.2.0/24 BestPizzaShop-Town1
10.11.3.0/24 ...
0
votes
0
answers
333
views
Is this a bad way to avoid host isolation with WireGuard?
Background
I am adding support for WireGuard VPN to an embedded device. The user will be able to set the AllowedIPs configuration themselves. WireGuard uses the allowed IPs to set routes on the host,...
0
votes
0
answers
248
views
How to select packets in iptables in nested IPIP tunnel?
I have IPIP tunnel as shown in tcpdump output bellow: IP 192.168.240.112 > 192.168.250.112.
Inside this tunnel, there is a traffic in another IPIP tunnel IP 10.233.86.94.35938 > 10.233.100.199....
0
votes
2
answers
6k
views
How do I set up Wireguard in Docker with lan access
I'm trying to set up a VPN server with wireguard.
I have the following setup in docker compose:
version: "3.1"
services:
wireguard:
image: linuxserver/wireguard
cap_add:
- ...
0
votes
0
answers
223
views
Wireguard-ui: `Bad PATH_INFO : /login`
I've successfully installed Wireguard + UI to a Debian11 VPS with this AIO script.
But if I open the http://localhost:5000 via Webmin tunneling, I get this error:
Bad PATH_INFO : /login
How do I fix ...
0
votes
0
answers
167
views
Passphrase wireguard/Firezone
I created different users through firezone to use wireguard vpn. So I have the user, and the "device" in which I define the accessible IPs, and the DNS to use.
But to make things even more ...
1
vote
0
answers
69
views
Allow forwarding only between VPN clients within the same subnet mask
I am using Wireguard (interface wg0) for a VPN on a server, where all connected clients have IPv6 addresses assigned by the server (controlled by AllowedIPs).
Let's say we have three clients:
Client ...
1
vote
0
answers
1k
views
No Connection with Pivpn wireguard lxc Container on a proxmox host
Describe the issue
I can't connect to anything. Not the internet nor the local network
Expected behavior
I want if my device is connected to the wireguard vpn to surf the web and to access every ...
3
votes
0
answers
1k
views
Wireguard - Clients need to make many attempts to connect before receiving data back
I have a vanilla wireguard configuration - a cloud VPS running Centos stream is the server, and the clients in question are MacOS and an iOS iphone.
Often when attempting to connect after a long ...
1
vote
0
answers
808
views
Wireguard not working on linux ubuntu
I have setup a vpn server in my house using pivpn and wireguard on a raspberry and I want to connect to it when I'm away.
I have generated the wireguard configuration which is working on all my ...
3
votes
1
answer
968
views
Enabling wireguard log messages with secure boot / kernel lockdown enabled
On fedora 37, I am trying to enable kernel log messages for wireguard by executing this command in a root-shell:
echo module wireguard +p > /sys/kernel/debug/dynamic_debug/control
Unfortunately, ...
0
votes
0
answers
773
views
DNS query refused when connected to WireGuard/pfSense
I'm using pfSense with OpenVPN for more a decade now. Also intensively used many services from pfSense (DNS resolver, DHCP, HA Proxy, SquidGuard, firewall of course...) In short - I do have some ...
0
votes
0
answers
331
views
Cloudflare's warp is using same private ip(172.16.0.2) for all of it clients
I know cloudflare is using boringtun for warp service.
But how it use same address for all of clients, is it boringtun feature?
1
vote
1
answer
351
views
Whitelist cgroup from wireguard VPN
I have a wireguard VPN, setup and enabled through NetworkManager, called wg0. I want to allow a program to access the internet directly without going through the tunnel. For this I’m trying to match ...
0
votes
1
answer
275
views
Forward Wireguard traffic to another port
I have installed Wireguard on server A with below configuration:
[Interface]
Address = 172.16.0.1/24
ListenPort = 51820
PrivateKey = <server private key>
# Firewall rules
PostUp = iptables -A ...
0
votes
0
answers
164
views
Script to stop and start firewalld at boot
I have a ticketing system website connecting to a back-end database on my LAN through a Wireguard VPN tunnel. The front end web server is an Ubuntu 20.04.6 LTS VPS and if I reboot the server (which is ...
1
vote
0
answers
613
views
How to limit Wireguard bandwidth
I have Debian 11 server with installed Wireguard with wg0 interface and 3 peers. Server bandwidth speed is 100 MBit and traffic is around 500 GB per month.
What I need is: these 3 peers can use 100 GB/...
1
vote
2
answers
2k
views
Cannot connect to Samba share via VPN
I have a Wireguard site-to-site VPN that connects successfully.
I can ping the remote Samba server using it's IP address 192.168.30.1
I cannot access a share over the VPN tunnel using its IP address \...
1
vote
0
answers
2k
views
Wireguard - Setup server to allow connection to LAN but not route internet
I am trying to learn WireGuard. I see many tutorials online for how to have internet and local network access over WireGuard. However, what I would like is a connection where the peer can access my ...
0
votes
0
answers
310
views
Route all incoming internet traffic from wg0 through wg1 in Wireguard
I have a Debian VPS which is running two different WireGuard interfaces. The first one, wg0.conf, is being used by myself to connect to the VPS. Next, I would like to route all my internet traffic ...
0
votes
1
answer
179
views
How to route traffic from source IP to gateway on another subnet?
I have the following network setup:
2 LANs; 1 local and 1 remote, connected site-to-site via WireGuard.
192.168.0.0/24 -> local
192.168.2.0/24 -> remote
192.168.0.0/24 has a gateway 192.168.0....
1
vote
1
answer
1k
views
Using Wireguard to route traffic via server
I'd like to use Wireguard on my VPS server to tunnel my http/https traffic and have a fixed IP.
I tried using the tutorial on the Digital Ocean (https://www.digitalocean.com/community/tutorials/how-to-...
0
votes
1
answer
594
views
Linux: Automatically remove routing reference when next-hop is unreachable
I'm setting up the routing for my site-to-site wireguard VPN. Everything seems to be working fine but I have noticed that if a remote destination (next-hop) becomes unreachable the Linux kernel doesn'...
1
vote
0
answers
2k
views
Wireguard connectivity between handshakes
I've been having this really weird issue. I'm running WG on a VPS and on my macbook.
I run WG on the linuxserver container on a debian host.
The connection is great, the speed is good, everything ...
1
vote
1
answer
692
views
WireGuard & Network Namespaces
I am trying to set up a VPN gateway with two wireguard interfaces.
One being a gateway accessible from the init namespace, which can forward incoming local packets from eth0.
The second interface is ...
0
votes
0
answers
1k
views
WireGuard is blocked by firewall
I decided to use wireguard as my VPN. Set up VPN server on VM machine.
VPN Server (10.13.13.1) <-> VPN Androind Client(10.13.13.6)
VPN Server (10.13.13.1) <- VPN Widnows Client (10.13.13.12)
...
-1
votes
1
answer
360
views
Wireguard custom routes lost after suspend
I am running wireguard client on Ubuntu 22.04 from a Lenovo laptop using a WiFi connection, to connect to my home network. The configuration leads all traffic through my home network and it all works ...
0
votes
0
answers
633
views
Wireguard - Can't connect to private url
We moved from OpenVPN to Wireguard recently. Our sales people need access to a private URL on our infra accessed via VPN. The domain is resolved by a private DNS.
Everyone in the company managed to ...