Questions tagged [wireguard]

352 questions
0
votes
1 answer

Remote mysql server in docker container - access using macvlan and wireguard?

Situation: Several VPS servers around the US connected to my laptop via wireguard mesh network. For wireguard mesh network Im using tool called innernet (https://github.com/tonarino/innernet). So basically its like my laptop and vps servers are on…
Dannyboy
  • 133
  • 5
0
votes
0 answers

Access container's port from on eIP

I have three servers that are in same network via WireGuard. Their IPs are: 10.10.10.1 10.10.10.2 10.10.10.3 I have a docker container on 10.10.10.1 that give me service on port 8080/tcp. I want 10.10.10.2 to be allowed connect to it but not…
0
votes
1 answer

Wireguard Site2Site with mobile office

I've to networks connected with Wireguard. Lan1: 10.240.0.0/24 via 10.100.1.1/32 on public static ip A.B.C.D/32 Lan2: 192.168.0.0/24 via 10.100.1.6/32 on dynamic ip from provider The 10.240.0.0 net is a wireguard net (wg0) over multiple…
TRW
  • 488
  • 3
  • 16
0
votes
1 answer

ARP Proxy second IP of VPS to route it over Wireguard

I have set up an ARP Proxy on my VPS. With this Setup, I can route incoming traffic on the second IP of my VPS over WireGuard. This should allow my Raspberry Pi at home to use the second Public IP. I got this kind of working. Incoming Pings are…
quylur
  • 1
  • 2
0
votes
1 answer

WireGuard Port-forwarding from Client in the Host

i'm trying to connect a port from a wireguard client to the host network of the server. I tried to do it with IPtables but I always get the reply of "unreachable" It seems that my configuration could be the problem? Thanks! TEST…
victorelec14
  • 1
  • 1
  • 2
0
votes
0 answers

IPtables port forwarding to host machine IP

In an LXC container I have Wireguard installed and the client connects normally and I see the port and the information, but when I try to curl to localhost (127.0.0.1) or to the local ip (192.168.1.180) it doesn't connect. 192.168.1.180 (Host…
victorelec14
  • 1
  • 1
  • 2
0
votes
1 answer

Wireguard + Split Tunnel + Two Peers -- Handshake failure with second peer because of private key

I've setup two wireguard peer servers and can connect sucessfully to each one independetly. But when I try to connect to two peers at same time and split tunnels, It does fails to hand shake with second server. I think thats because two peers…
user3411911
  • 11
  • 2
  • 5
0
votes
1 answer

Firewalld Forwarding Functionality with Wireguard

I have asked before how to forward ports on a VPS running a wireguard service with ufw and iptables as the management. I had to do this: (56000 is a random port I chose) (10.66.66.2 is the internal ip of wireguard) ufw route allow proto tcp to…
user760466
0
votes
1 answer

Is it possible to route data between 2 wireguard devices on the same machine?

I want to find out how much overhead wireguard creates on my machine in terms of latency. However, my server is remote, so I would like to test it solely on the machine to avoid measuring the whole network latency. So for measuring the latency, I…
0
votes
1 answer

ufw route allow in on wg0 out on wg0 to 10.0.0.6/32

I use a WireGuard VPM to reversely connect to my home server via an external entry node. On that entry node, I try to add a firewall rule using ufw. Its purpose is to only allow routing to one and only one specific IP (10.0.0.6). So the basic setup…
randmin
  • 59
  • 8
0
votes
0 answers

WireGuard handshake fails to be received

EDIT: I figured it out, solution below. I've been attempting to set up WireGuard as a VPN gateway manually instead of using wg-quick, as I don't want to route the local machine's traffic over the tunnel, only a specific interface and subnet's…
xBelladonna
  • 1
  • 1
  • 2
0
votes
1 answer

nmcli connection import type wireguard writes additional default route - How to avoid it?

At start I have: [root@client ~]# ip ro | grep default default via 10.0.2.2 dev eth0 proto dhcp metric 100 When i say nmcli connection import type wireguard file /etc/wireguard/wg0.conf I get [root@client ~]# ip ro | grep default default dev wg0…
0
votes
1 answer

Wireguard tunnelling multiple clients to server and internet (allowedips)

I recently set up wireguard and had it working for one client (laptop), then adding my phone to the mix and my laptop stopped connecting. it works if I comment the other one out. I know it is due to allowedips 0.0.0.0/0 in both cases. The thing is…
0
votes
2 answers

Why does my VPN add its own IP address range to my routing table with local gateway?

My VPN sets up my routing table with 0/1 & 128.0/1 to their gateway. However they also set the range of their data center to my local gateway. Let's say 123.456.789.123/32 routes to 192.168.1.1 The default route is also left as 192.168.1.1 Why would…
0
votes
1 answer

WireGuard via systemd-networkd but with /etc/wireguard/wg0.conf

Is there any solution to use /etc/wireguard/wg0.conf for both, wg-quick and systemd-networkd. Following this example I have to duplicate configuration, but I want to store config in one place. How to achieve that?
kAldown
  • 161
  • 1
  • 1
  • 7