Questions tagged [wireguard]

257 questions
1
vote
1 answer

Wireguard client communication without peer key via 1 router server

I have this setup: ---server 1 config--- [Interface] Address = 10.200.200.1/24 ListenPort = 6666 PrivateKey = server_private_key [Peer] PublicKey = client1_public_key AllowedIPs = 10.200.200.2/32 PersistentKeepalive = 21 [Peer] PublicKey =…
1
vote
1 answer

Set VPN Connection Timeout in WireGuard

I have a WireGuard VPN server running. How do I set a timeout so that connected clients will get disconnected if they are idle for the given time (or maybe even disconnection irrespective of being idle or not)? Where do I specify this parameter, I…
1
vote
1 answer

Wireguard mesh between public and local network

I currently have my mesh setup like this: With the wireguard config similar to this on every node: [Interface] Address = 10.1.0.1/32 PrivateKey = ListenPort = 5888 [Peer] # example public node [1-3] PublicKey = AllowedIPs = 10.1.0.2/32 Endpoint =…
maxisme
  • 159
  • 1
  • 10
1
vote
0 answers

How to configure Wireguard to allow Internet access?

I have an Ubuntu 20.04.1 LTS to host a linuxserver/wireguard Docker container. Clients can successfully connect to the Wireguard server, but I'm unable browse Internet websites on the clients while they're connected. How do I configure my Wireguard…
PaulH
  • 181
  • 3
  • 7
1
vote
0 answers

ping packet loss in wireguard UDP over TCP + UDP over socat tunnels

I have a wireguard tunnel mostly working between two Debian systems, but I had to workaround a ISP firewall (firewall X in the diagram below) that blocks everything inbound and prevents Server B from listenting for wireguard UDP packets…
Lucio Crusca
  • 330
  • 2
  • 10
  • 31
1
vote
1 answer

Configure internal groups with Wireguard VPN

I am very newbie to VPN so, be patient with me. Is it possible to get WireGuard work with config like that?: I need to create groups of pcs that can see only each other and with no access to the internet through VPN. They use their own gateway. For…
gerpaick
  • 15
  • 8
1
vote
1 answer

Wireguard routing from wg1 to wg0

I have two networks configured with Wireguard. wg0 is for servers and wg1 for VPN users. When a VPN user on wg1 wants to reach the wg0 network, the packets should be router over one of the wg0 servers (the VPN gate). wg0.conf on VPN gateway and on…
TRW
  • 438
  • 3
  • 14
1
vote
1 answer

iptables, wireguard: 2-way routing between VPN and LAN

i am setting-up a VPN using WireGuard and are stuck configuring my firewall on the respective VPN server. I want the following features available: VPN devices (10.6.0.0/24) available from LAN (10.20.0.0/24) (problem!) LAN devices (10.20.0.0/24)…
TheClockTwister
  • 151
  • 1
  • 7
1
vote
1 answer

WireGuard: cannot delete iptables rule for default route

since I don't want friends and colleagues in my VPN to use my VPN server as a proxy VPN for "anonymous" surfing, I want to disable the default route for the VPN. In a nutshell: LAN (10.20.0.0/24) must be accessible WAN (0.0.0.0/0) must be…
TheClockTwister
  • 151
  • 1
  • 7
1
vote
1 answer

Kubernetes: route outgoing UDP traffic through service

My question is about Kubernetes' internal traffic routing and probably about routing / NAT in general. Goal: I'm running a Wireguard service on Kubernetes and I'd like to route all outgoing traffic which has entered through Wireguard through another…
bob3000
  • 11
  • 2
1
vote
1 answer

How to forward/route packets via wireguard overlay network?

My question is related to basics in network routing and iptables, and is probably due to my lack of understanding on how I should set this up. I have established an overlay network between hosts using wireguard, where one is behind a Router/NAT. In…
Overbryd
  • 393
  • 2
  • 9
1
vote
0 answers

Can't get Wireguard running on Freebsd to ping

I have a Freebsd installation running VirtualBox on my local LAN behind NAT trying to connect out to a Scaleway VPS running Ubuntu 20.04. Using Debian 10 the VPN connects just find and I can ping all interfaces and ssh between machines. But using…
jradxl
  • 171
  • 1
  • 1
  • 5
1
vote
1 answer

In WireGuard on a sending peer, how is packet sent from the `wg0` interface to the UDP port?

I'm trying to understand, once a packet reaches the WireGuard interface (wg0) how is it sent to the UDP port from where it can be sent to the receiving peer. I was reading the WireGuard whitepaper and it says The interface itself has a private key…
dsinecos
  • 111
  • 1
1
vote
1 answer

Dockerized Wireguard with killswitch doesn't allow the local access of a service sharing the network

I have two containers linuxserver/wireguard and X on Ubuntu (server) 20.04. X has a WebUI on port q that I would like to access via my local network (192.168.178.0/24 - fritzbox). They are configured that X uses the same 'network' as…
1
vote
1 answer

Internet on EC2 based Wireguard not working

Summary: I have created a Wireguard VPN server on an AWS EC2 instance. From the VPN client I can connect to the VPN correctly and ping the VPN server. When attempting to access the internet from the client I am unable to get any responses from…