Re: Source IP incorrect on multi homed systems

2023-02-18 Thread Mike O'Connor
Generally all OSs will if sending from a local process will use the address of the outgoing interface for the packet. If the packet is forwarded and no NAT is used the address will be routed via the interface suggested by the routing table. So local routing can be a real pain, policy based

Re: eBPF + IPv6 + WireGuard

2022-01-04 Thread Mike O'Connor
Hi Wireguard is a layer 3 system. As a result you must route traffic not bridge, this also means that ip forwarding must be enabled. You will need to firewall the traffic or setup a separate routing table. Other routers in your network will need to know about the IP addresses allocated to

Re: Dynamic routes

2021-11-24 Thread Mike O'Connor
On 24/11/21 9:48 pm, Chriztoffer Hansen wrote: On Mon, 22 Nov 2021 at 18:20, Robert Dahlem wrote: I could always install Quagga or Bird and use OSPF. But that might be a bit of an overkill for a simple active/passive failover. RIP, OSPF, BGP, EIGRP. Either can work. And would IMO be

Re: [Warning: DMARC Fail Email] Re: ipv6 connexion fail - ipv4 OK

2021-08-27 Thread Mike O'Connor
On 28/8/21 7:14 am, Roman Mamedov wrote: On Sat, 28 Aug 2021 07:05:45 +0930 Mike O'Connor wrote: On a 1500 link I'm having to use 1280 to get ipv6 to successfully go over a wireguard link. Then it is not a true 1500 MTU link, something in-between drops packets at a lower bar. Or maybe not all

Re: [Warning: DMARC Fail Email] Re: ipv6 connexion fail - ipv4 OK

2021-08-27 Thread Mike O'Connor
Hi On a 1500 link I'm having to use 1280 to get ipv6 to successfully go over a wireguard link. I really think wireguard should be able to fragment and send via multiply UDP packets. wireguard works very well other than this issue, performance is extremely good. Mike On 28/8/21 2:46 am,

Re: wgX iface as slave to a bridge - Linux

2021-04-25 Thread Mike O'Connor
Hi L. No wireguard is a layer 3 vpn, a bridge is layer2 Cheers Mike > On 25 Apr 2021, at 2:02 pm, lejeczek wrote: > > Hi guys. > > Apologies, I'll bother you guys as I failed to find some better places to > ask, I searched for forums etc. but failed. > > Can wiregurard ifaces be enslaved

Re: WireGuard for Windows tunnel deactivation after prolonged resolution failure during startup

2021-01-28 Thread Mike O'Connor
Hi Jason I'm not a windows users so can not test, but it seems to me that Microsoft have API's to indicate the network status. This to indicate if there is a connection https://docs.microsoft.com/en-us/windows/win32/api/wininet/nf-wininet-internetgetconnectedstate This to indicate if there is

Re: Significant Dropped Packets on WG interface

2020-05-14 Thread Mike O'Connor
Hi > Reduce MTU of the WG interfaces to accomodate for overhead. See > https://www.mail-archive.com/wireguard@lists.zx2c4.com/msg01856.html for > calculations of by how much. So yes it was, but I can not understand why. I worked out the MTU be pinging back from the VPN server to the clients

Re: Significant Dropped Packets on WG interface

2020-05-14 Thread Mike O'Connor
> Reduce MTU of the WG interfaces to accomodate for overhead. See > https://www.mail-archive.com/wireguard@lists.zx2c4.com/msg01856.html for > calculations of by how much. Ok but why all of a sudden, I'll go thought the process again and see. >>   inet6 addr: 2506:c500:ff4:1::aa/64

Significant Dropped Packets on WG interface

2020-05-14 Thread Mike O'Connor
Hi All For the last few weeks my Wireguard link which I use to as my default gateway has been having issues with TCP connections stalling. I've been trying to work out what is wrong. I just noticed that the Wireguard link has dropped packets at both ends. wg-p2p    Link encap:UNSPEC  HWaddr

Re: Is there a way to use wireguard as a non-encrypted VPN?

2020-05-04 Thread Mike O'Connor
On 12/4/20 4:43 am, m...@pmfarmwald.com wrote: > I have some older routers that run OpenWRT just fine, but are a bit slow at > Wireguard (3-5 MBytes/s for SMB transfers) and which are too slow for > playing HD movies. > For these routers/uses I don't care about security, I just want a VPN to >

Re: BGP over multiple wireguard vpn link

2020-02-08 Thread Mike O'Connor
Hi Miki I'm doing basically what your talking about but with OSPF. I do not use wg-quick, instead I configure the Wireguard in the network interface file like /etc/network/interface on all the machines. iface wg-p2p inet static             address xxx.xxx.xxx/xxx             pre-up ip link add

Re: upgrading raspberry pi required me to re install wireguard

2019-03-01 Thread Mike O'Connor
On 22/2/19 11:05 pm, Emanuele Bernardi wrote: > I'm very interesting about make it work with dkms, could you please > explain the process? thanks > Emanuele > > On 22/02/19 00:29, Derrick Lyndon Pallas wrote: >> >> I just use DKMS to do it. Check out WireGuard to /usr/src, ln -s >> WireGuard/src

Traffic flow stopping

2019-01-07 Thread Mike O'Connor
Hi All So I've been using Wireguard to route part of my class C to my home for about 4 months now, but for the last few days the traffic stops for a short while every few minutes. I can not think of anything which has changed, turning OpenVPN back on fixes everything. I've tried reducing the