search

Ysurac / openmptcprouter

OpenMPTCProuter is an open source solution to aggregate multiple internet connections using Multipath TCP (MPTCP) on OpenWrt
https://www.openmptcprouter.com/
GNU General Public License v3.0
1.86k stars 269 forks source link

Wireguard tunnel on VPS to reach LAN and OpenVPN vs GT #3416

Closed AndreaLeidi closed 4 months ago

AndreaLeidi commented 4 months ago

Expected Behavior

To have a Wireguard tunnel, based on VPS, and reach my LAN devices through OMR, in association with the "new default" OpenVPN (instead of GT).

Current Behavior

I had a perfectly working Wireguard link, based on VPS, to access my LAN stuff through OMR. I did it following some threads on this board, made for version 0.59 and therefore with GT as OMR VPN.

Now I understand the wind is changing and Ysurac is moving to OpenVPN as default. In my experience IPv6 is not working good anymore with GT in the latest stable releases (6.1 as well as 5.4 legacy branch), e.g. ICMPv6 traffic does not route correctly through 6in4 tunnel. When I switched to OpenVPN magically IPv6 came back to 100%. Not only TCP and UDP. From LAN I can ping -6 and traceroute -6, so ICMP got its way and 6in4 counters show traffic as any other interface. Obviously, my Wireguard link is not working anymore in team with OpenVPN.

I'm kindly asking your help about:

  1. OpenVPN tunnel works on 10.255.252.1 VPS side and... 10.255.252.0/24 dynamically assigned, router side. I wish to have static addresses both sides, how to?
  2. I wish to route 192.168.100.0/24 from VPS through OpenVPN to reach my devices in LAN. How can I do it? Previously with GT the route was built-in, now with OpenVPN, from VPS I can't reach (or ping, at least ) any 192.168.100.0/24 address anymore.
  3. I already did the appropriate changes to firewall zones, rules and policies, both VPS and router. I guess I only need to route the traffic 192.168.100.0/24 VPS <-> OpenVPN <-> OMR in OpenVPN config.

I know I could find many answers in OpenVPN docs, but OMR isn't easy and I fear to break something without any hint.

Thanks a lot!

Specifications

AndreaLeidi commented 4 months ago

I'm quickly got back to GT. It seems that, when IPv6 traffic is properly routed to OMR6in4, OMR-bypass stops working. In fact, in the latest 5.4 snapshot, June 18, OMR6in4 doesn't even work with OpenVPN. I see I can't have ICMPv6 traffic routed and OMR-bypass working properly at the same time. OMR-bypass for me is THE essential feature so I'll wait for better days. It's weird because everything worked fine on 0.59.1