Questions tagged [wireguard]

257 questions
0
votes
0 answers

Unable to resolve private dns zone over vpn with bind9 DNS

The Problem I have a VPC in which I need to access the servers using private FQDNs. The VPC is accessible through a wireguard VPN. The VPN server also serves as a DNS server running BIND9. I have set the DNS server with a private zone according to…
0
votes
0 answers

site-to-peer topology with wireguard

I need to modify an existing Wireguard VPN with start topology (central peer with public IP, called "server" in the schema), so that one site will be connecting via a single "site peer" routing the traffic from other peers in its local network (as…
eudoxos
  • 343
  • 2
  • 3
  • 11
0
votes
1 answer

Wireguard not working with enpoint included in AllowedIps

I run a wireguard enpoint as a docker container on my server with roadwarrior clients connecting to it via LTE: The real server address is a static public IP. The client config is as follows (irrelevant parts excluded): [Interface] Address =…
Lukas
  • 103
  • 2
0
votes
1 answer

Can clients run a IPIP (protocol 4) tunnel inside Wireguard as in OpenVPN?

When two subnets are connected via Wireguard, clients can communicate to each other using TCP/UDP/ICMP. Can clients run IPIP (protocol 4) tunnels in Wireguard as in OpenVPN? I'm planning to migrate from OpenVPN to Wireguard and checking if it will…
laimison
  • 519
  • 2
  • 7
  • 16
0
votes
0 answers

Why doesn't Wireguard prevent the same client from using the same config file?

My question is regarding a blog post: https://www.procustodibus.com/blog/2021/01/same-key-multiple-peers/ My case is a bit different, it isn't a wireguard server admin problem. I'd like to restrict what we can't control: the user. What if the client…
Alexis
  • 152
  • 1
  • 12
0
votes
0 answers

Kubernetes Wireguard VPN tunneling home-lan with cloud-server error

Problem I am currently trying to VPN tunnel nodes of my LAN with a node outside of my LAN (Inside a data center). For that, i was trying to use K3S. Sadly i cant ping the worker (inside lan) over the master (outside lan). Pinging between worker…
0
votes
1 answer

Iptables: how to allow forwarding from wireguard NIC only to some IP

Context I successfully integrated Wireguard in my LAN so I could access my NAS (192.168.1.45) from the outside. |Router| ===:5182=> |VPN server| ====> |NAS| 192.168.1.254 192.168.1.21 (wlan0) 192.168.1.45 …
zar3bski
  • 133
  • 1
  • 2
  • 9
0
votes
1 answer

Routing call to IP-filtered web service from Docker container via WireGuard VPN

Scenario: A simple PHP script (myip.php) hosted on a server with public IP WSIP. The script is available via http and https. I have a small server (GW) with public IP GWIP. This server is intented to be used only as a gateway. Another server…
0
votes
0 answers

Wireguard server multi-hop for some peers

I have several Wireguard servers hosted on Ubuntu VPS servers. There are peers setup on each VPN server. I have the servers setup in "mesh" configuration and they're all able to ping each other directly. The servers have ipv4 forwarding enabled. I…
0
votes
2 answers

Secure my DNS server by allowing connection only from VPN

I have an Ubuntu 20.04 LTS VPS (connected directly to the internet), on which I installed WireGuard and Pi-Hole. I noticed tons of requests on my ad-blocking DNS server, and I suddenly realized that leaving my 53 port open was a bad idea at all. I'm…
0
votes
0 answers

Cannot push all traffic through Wireguard tunnel on Ubuntu

On server, [Interface] Address = 10.13.13.1 ListenPort = 51820 PrivateKey = <...> PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE PostDown = iptables -D FORWARD…
sherlock
  • 141
  • 5
0
votes
1 answer

Proxy/Route requests to subdomains to different local/wireguard IP addresses?

We have a virtual machine with a public IPv4 address, to which our example.com and *.example.com domain points. We have several distributed low-tech computers establishing a wireguard connection/tunnel with the publicly reachable virtual machine. We…
fooness
  • 1
  • 1
0
votes
0 answers

SSH connection is broken down when wireguard is connected

I am going to connect to the vps by ssh and connect to the wireguard vpn service on it. But as soon as I execute the wireguard client, ssh connection is broken down. Of course I know this is because routing rules are changed, and fixed those issues…
DevShine
  • 1
  • 2
0
votes
0 answers

Wireguard network peers access to lan

I hope you can help me with my problem. I am building a network for personal use and I found some issues, I don't have experience in networks. I will explain using the attached image: Network Infrastructure Diagram Problem: I cannot reach devices on…
0
votes
0 answers

Route internet traffic from client A via client B

I have a server S, client A and client B. All are Ubuntu boxes and all are in different cities (Seattle, Albuquerque and Boston). S has wireguard installed and both A and B establish connection to wireguard and end up in the same VPN. A and B see…