wg-quick down not reverting DNS parameters on MacOS

2023-08-23 Thread Matteo Franzil
Hi! I extensively searched for any discussion on this bug (or at least, I hope so), which has been bugging me for a while. I am a Wireguard user on macOS Ventura (version 13.4.1 (c)), and installed wireguard via the wireguard-tools (version 1.0.20210914) and wireguard-go (0.0.20230223) comma

wg-quick down not reverting DNS parameters on MacOS

2023-08-23 Thread Matteo Franzil
Hi! I extensively searched for any discussion on this bug (or at least, I hope so), which has been bugging me for a while. I am a Wireguard user on macOS Ventura (version 13.4.1 (c)), and installed wireguard via the wireguard-tools (version 1.0.20210914) and wireguard-go (0.0.20230223) comma

Is there a simplified Android User Interfaces on FireTV ?

2023-08-23 Thread wireguard
Hi, I'm not quite sure if this is a real bug, but I only get to a simplified GUI on the FireTV instead of the one I'm usually used to from Andoird. Only when I reinstall the apk and open it right after, I get the usual GUI with settings options. ┌──

Re: [WireGuard] Header / MTU sizes for Wireguard

2023-08-23 Thread blurt_overkill882
Hello, I hope this is the right place. I see here[1] that if you're using IPv4 exclusively, you can get away with an MTU of 1440. If my client only has IPv4 internet, however the server issues an IPv6 address for use by the client, can the client still use 1440 without fragmentation, or must th

Re: Wireguard Dynamic ARP entries

2023-08-23 Thread Endre Szabo
I guess it is a normal thing on windows as Cisco VPN Client works the same way. -- Endre On August 19, 2023 22:31:33 Diyaa Alkanakre wrote: Hello everyone, I am seeing lots of ARP dynamic entries on Windows when typing "arp -a" on the command line on windows. I am wondering if that is a nor

Disconnection Bug on Win 11 with Intel adapter

2023-08-23 Thread Kat Liny
There appears to be a bug that causes the network adapter "Intel(R) Wi-Fi 6E AX211 160MHz" on Windows 11 (with all current updates) to disconnect and re-connect to the WiFi network a few times AFTER disconnecting a WireGuard client profile. If the WireGuardTunnel service can be either set to automa

Re: IPv6 and PPPoE with MSSFIX

2023-08-23 Thread Marek Küthe
On Tue, 22 Aug 2023 17:39:23 -0300 Luiz Angelo Daros de Luca wrote: > Hello, > > We noticed an issue with clients that use PPPoE and connect to WG > using IPv6. Both sides start to fragment the encrypted packet leading > to a severe degradation in performance. We reduced the wireguard MTU > from

Re: [WireGuard] Header / MTU sizes for Wireguard

2023-08-23 Thread Roman Mamedov
On Thu, 17 Aug 2023 20:14:52 + blurt_overkill...@simplelogin.com wrote: > I see here[1] that if you're using IPv4 exclusively, you can get away with > an MTU of 1440. If my client only has IPv4 internet, however the server > issues an IPv6 address for use by the client, can the client still us

Re: IPv6 and PPPoE with MSSFIX

2023-08-23 Thread Daniel Gröber
Hi Luiz, On Tue, Aug 22, 2023 at 05:39:23PM -0300, Luiz Angelo Daros de Luca wrote: > We noticed an issue with clients that use PPPoE and connect to WG > using IPv6. Both sides start to fragment the encrypted packet leading > to a severe degradation in performance. We reduced the wireguard MTU > f

Re: IPv6 and PPPoE with MSSFIX

2023-08-23 Thread Daniel Gröber
Hi, On Wed, Aug 23, 2023 at 04:58:40PM +0200, Marek Küthe wrote: > PPPoE adds 8 bytes of overhead so that an MTU of 1432 can be used. I > also have to do this at home with my DSL line for example. > The MTU should be set on each side (on both peers) for this to work. Oh, I just realized I used th

Re: IPv6 and PPPoE with MSSFIX

2023-08-23 Thread Luiz Angelo Daros de Luca
> Hi, Hi Daniel, > On Wed, Aug 23, 2023 at 04:58:40PM +0200, Marek Küthe wrote: > > PPPoE adds 8 bytes of overhead so that an MTU of 1432 can be used. I > > also have to do this at home with my DSL line for example. > > The MTU should be set on each side (on both peers) for this to work. > > Oh,

Re: IPv6 and PPPoE with MSSFIX

2023-08-23 Thread Luiz Angelo Daros de Luca
> > I could dynamically add firewall rules to clamp MSS per authorized_ips > > but, theoretically, the kernel has all the info to do that > > automatically. I wonder if MSSFIX could detect the best MTU for a > > specific address through the wireguard. It should consider the > > peer-to-peer PMTU, t

[PATCH net] wireguard: receive: fix data-race around receiving_counter.counter

2023-08-23 Thread Nikita Zhandarovich
Syzkaller with KCSAN identified a data-race issue when accessing keypair->receiving_counter.counter. This patch uses READ_ONCE() and WRITE_ONCE() annotations to fix the problem. Fixes: a9e90d9931f3 ("wireguard: noise: separate receive counter from send counter") Reported-by: syzbot+d1de830e4ecda

Re: IPv6 and PPPoE with MSSFIX

2023-08-23 Thread Hugo Slabbert
> In my case, the PPPoE interface got MTU=1480. They might be stacking > something else on top of it or PPPoE might have optional fields. I > read somewhere that PPPoE might use either 8 or 20 bytes, but I'm not > an expert on PPPoE. For ref, an L2TP + PPPoE stack isn't too uncommon, and gives you