search

porech / engarde

A go network utility to create a reliable IP tunnel over multiple connections
GNU General Public License v2.0
275 stars 41 forks source link

DNS/traffic issue #46

Closed rtgoodwin closed 3 years ago

rtgoodwin commented 4 years ago

First off, thanks for making this! I need a reliable failproof connection for "high stakes" streaming (ok it's comedy :) ).

Env

Put the engarde client locally, server remote. Used the sample config file but of course edited the destination, and edited the WG tunnel dest.

Connected WG, connected engarde, as far as I can tell. The engarde client reports the new interface and doesn't complain.

With engarde on, unable to ping (8.8.8.8 or 1.1.1.1 for example), nor DNS resolution. rotvpn installs unbound for encrypted DNS, but I get the sense that traffic wasn't flowing period, so not specifically a DNS issue. (I could be wrong about what destinations allow ICMP, to be fair). I checked all the ports that rotvpn opens, and tried to explicitly open any engarde port I could see, as well as setting unbound to accept traffic on all interfaces, from all client IP ranges.

I don't know that it's an issue with DNS, but I'm also not sure how engarde comes into the picture at this point.

I know this is semi vague; I'm hoping for troubleshooting tips to "teach myself to fish" on it.

Thanks in advance!

ale-rinaldi commented 4 years ago

Hello,

here it seems that there's some issue with the configuration itself, and so with the entire traffic flow, rather than just the DNS resolution.

May you please post your Wireguard and engarde config files, both for client and server? Of course without any key and public IP.

Thanks!

rtgoodwin commented 4 years ago

Thanks for the prompt response, will do when back at that system. Thanks!

ale-rinaldi commented 3 years ago

Hello, did you solve your issue? Thanks

rtgoodwin commented 3 years ago

My apologies, haven't had a chance to really test again. i'm confident it is a WG config issue, because otherwise your project wouldn't be working so well otherwise. I'll close this and if I can't solve it, let you know :) Sorry for keeping it open!

ale-rinaldi commented 3 years ago

No problem man, you may need any help with the configuration just drop a note :)