Questions tagged [wireguard]

352 questions
1
vote
1 answer

WireGuard in routing mode rather than NAT mode (AWS)

I have been trying to get this working for a long time and finally decided I would join serverfault in hope that someone can help before I lose my mind. Current setup: Users connect into the AWS network via a WireGuard VPN server I setup. Its…
Tipex
  • 31
  • 7
1
vote
1 answer

Wireguard - Do not foward private/local IPs via eth0

I just setup a new Wireguard server (as vanilla as it gets) that is connected to two different subnets, eth0 goes out to the internet and eth1 is connected to a local/private network. When I connect with my Wireguard client, I can effectively go out…
FabianC
  • 11
  • 1
1
vote
2 answers

Can't reach networks behind Wireguard VPN server. Split-tunneligt config on client

I have Wireguard server in my corporate network. I can successfully connect to it from internet (using port publication). Wireguard server has two interfaces: 1: eth0: 192.168.30.100/24 2: wg0: 192.168.99.1/24 Here is ip route output: default via…
Nil
  • 41
  • 1
  • 5
1
vote
1 answer

WireGuard policy-based routing

This question is about configuring a WireGuard relay that routes all its peer's traffic to another WireGuard server, but the relay itself does not use that WireGuard server as the default gateway. I am doing some self-hosting stuff. Currently my…
Waiho
  • 23
  • 5
1
vote
0 answers

Tunneling a LEMP server through an oracle instance with wireguard. Cannot get Nginx Certbot certificates on LEMP server. How to debug?

I have a LEMP server at home running Ubuntu 22.02 and an Oracle cloud instance running Ubuntu 20.04. The Oracle cloud instance is acting as a Wireguard server. The LEMP server at home is acting as the Wireguard Client, and is being tunneled through…
DanRan
  • 73
  • 1
  • 3
  • 22
1
vote
1 answer

Wireguard Client to Client issues

Server: Ubuntu Wireguard server all clients connect to Runs SMB share: all clients can access when the VPN is connected Clients can ping eachother Client a: Windows Server 2022 Firewall: Allow 192.168.6.0/24 IIS *:80 Works locally, works on VPN…
NKCSS
  • 141
  • 1
  • 8
1
vote
0 answers

Set network route after starting docker container on ubuntu 20.04 TLS

is there a possibility to add an additional route to the host table (ubuntu 20.04 LTS) with docker toolset after starting a docker container? context: Docker version 20.10.12, build e91ed57 installed wireguard as container (image:…
Robber1986
  • 11
  • 1
1
vote
1 answer

WireGuard `wg-quick up` hangs on `ip link add $profile type wireguard`

I've been a happy WireGuard user for several years and never had any issues. Today, for seemingly no reason, I started having issues. I ran wg-quick up $profile as root and that terminal session locked up (ctrl+c/d etc don't kill it). The only…
Aaron Esau
  • 111
  • 5
1
vote
0 answers

How do I configure IPv6 via WireGuard?

I rented a VDS in order to set up WireGuard VPN on it and distribute all VPN clients /64 IPv6 subnets. From the hosting I originally got the address 2a0c:xxx:yyy::1/32. Here are the configurations of the network interfaces that I set up: ❯ ip a 2:…
async await
  • 11
  • 1
  • 3
1
vote
1 answer

Wrapping Kubernetes with Wireguard

I've a scenario with many different nodes. Some have public IPv4, some have IPv6, some are dual stack. So I've created a wireguard network (10.11.12.0/24), so that any peer can reach any other inside a private network regarding of IP-stack and…
TRW
  • 488
  • 3
  • 16
1
vote
1 answer

Sent WG trafic to eth1

I setup a wireguard server with AWS, setup the wireguard client with a raspberry PI. Now I need to redirect the WG traffic (wg0) to eth1 (eth0 is the uplink to my switch) -- my goal is to get a IP from my WG server when a client is connected to the…
Kevin
  • 113
  • 4
1
vote
1 answer

How to calculate a working "AllowedIPs" for Wireguard on Android?

I am using Android to connect to my WireGuard server through the public IP address of the host network. The LAN is using addresses 192.168.0.1-255. I would like the client to connect through the VPN only to addresses with in the LAN and directly…
uncovery
  • 305
  • 5
  • 14
1
vote
1 answer

Wireguard not working with enpoint included in AllowedIps

I run a wireguard enpoint as a docker container on my server with roadwarrior clients connecting to it via LTE: The real server address is a static public IP. The client config is as follows (irrelevant parts excluded): [Interface] Address =…
Lukas
  • 143
  • 1
  • 5
1
vote
1 answer

Proxy/Route requests to subdomains to different local/wireguard IP addresses?

We have a virtual machine with a public IPv4 address, to which our example.com and *.example.com domain points. We have several distributed low-tech computers establishing a wireguard connection/tunnel with the publicly reachable virtual machine. We…
fooness
  • 11
  • 2
1
vote
1 answer

QNAP QTS v5 OpenVPN to Wireguard server migration

QNAP's QTS version 5 has now Wireguard as a protocol in QVPN. There is however - as opposed to to OpenVPN - no option to download an easy-to setup config file to quickly connect a client to your NAS. It seems that users need to create their own…
uncovery
  • 305
  • 5
  • 14