Open herr1n opened 3 years ago
Could it be that while shadowsocks can tunnel udp, the outer layer must be udp too? So this works: wireguard (udp) --> shadowsocks (udp) --> shadowsocks (udp) ... Also this: shadowsocks (tcp) --> stunnel (tcp) --> stunnel (tcp) ... But his does not: wireguard (udp) --> shadowsocks (udp or tcp) --> stunnel (tcp) --> stunnel (tcp) ... Because you either have a conflict with wireguard or with stunnel. So either stunnel would be udp or wireguard needs to be TCP?
try gost, if u want to Tunnel UDP over TCP
Could it be that while shadowsocks can tunnel udp, the outer layer must be udp too? So this works: wireguard (udp) --> shadowsocks (udp) --> shadowsocks (udp) ... Also this: shadowsocks (tcp) --> stunnel (tcp) --> stunnel (tcp) ... But his does not: wireguard (udp) --> shadowsocks (udp or tcp) --> stunnel (tcp) --> stunnel (tcp) ... Because you either have a conflict with wireguard or with stunnel. So either stunnel would be udp or wireguard needs to be TCP?
but, what you want to get? if you just want query dns over vpn, you could use trojan forward mode to forward dns. check here, https://github.com/trojan-gfw/trojan/issues/514#issuecomment-677954946 if you want use wireguard to get dns query, you need to set right iptables policy, check here, https://github.com/0neday/vps-auto-installer
What version of shadowsocks-libev are you using?
3.3.4
What operating system are you using?
Ubuntu Focal
What did you do?
I'm trying to run wireguard over shadowsocks + stunnel as outer layer so traffic looks like TLS. stunnel + shadowsocks alone works wireguard + shadowsocks should work too However, all together do not work up to now. I'm unsure about the syntax and when/how to use "-L"/tunnel option of shadowsocks.
What is your config in detail (with all sensitive info masked)?
ss-client.json
ss-server,json
stunnel-client.conf
stunnel-server.conf:
client setup:
server setup:
What did you expect to see?
Successful wireguard connection
What did you see instead?
With this setup
gives my correct server ip. So stunnel + shadowsocks works.
But pinging the server from the client:
gives
The packets don't even make it to the remote end. So there is some problem between wireguard and the shadowsocks layer. I'm not sure if the error is a bug or if there is some problem with the shadowsocks config file syntax.