Development discussion of WireGuard
 help / color / mirror / Atom feed
From: Harsh Shandilya <me@msfjarvis.dev>
To: Jose Marinez <jedi_papi@yahoo.com>
Cc: "wireguard@lists.zx2c4.com" <wireguard@lists.zx2c4.com>,
	"Mehdi Sadeghi" <mx@43.yt>
Subject: Re: Shouldn't devices tethered to a device using Wireguard share the same IP?
Date: Thu, 21 May 2020 12:35:27 +0530	[thread overview]
Message-ID: <220C4723-011D-4322-8213-820B36A15186@getmailspring.com> (raw)
In-Reply-To: <1693606427.2437935.1590008022682@mail.yahoo.com>



On May 21 2020, at 2:23 am, Jose Marinez <jedi_papi@yahoo.com> wrote:

> Thanks Mehdi. I'll take a look.
>  
> @Harsh,
>  
> Thank you for the clarification. I will reach out to both. I know that
> on macOS Catalina, Apple implemented new APIs for loading kernel
> modules now that the core of the OS is read-only. Not sure if they've
> done the same for iOS. Perhaps they'll announce that next month.
>  
>> @Harsh - I do have a rooted Android device with Wireguard on I can use
>> for tethering. Say I build my kernel module from the list you sent.
>> How do I go about integrating it into the Wireguard Android app?
>  
>>>> The app will automatically detect the kernel module and work with it,
>>>> there's no user-facing work to be done.
>  
> Let me see if I understand you correctly. Are you saying that if I
> take my rooted phone make the /kernels folder add the manifest.xml and
> corresponding version kernel, the regular Wireguard app in the Play
> Store will utilize it? I'm trying to make sure I follow.

If you contribute your device's kernel to the repository I linked for
you, then we will build and host a signed kernel module for it. When you
go into the WireGuard app's settings page, you will find an option
titled, at least in English, "Download and install kernel module".
Pressing that will attempt to locate the module previously created by
the WireGuard infrastructure and load it onto your device.

> Will it show this extended UI in Settings?
>  
> Thanks again,
> Jose
>  
>  
>  
>  
>  
>  
>  
> On Wednesday, May 20, 2020, 03:00:18 PM EDT, Mehdi Sadeghi <mx@43.yt>
> wrote:  
>  
>  
>  
>  
>  
> Hi Marinez and the list,
>  
> There is a very nice open source app that can share the VPN connection
> of a rooted device with clients on Android. Here is the link:
>  
> https://github.com/Mygod/VPNHotspot/blob/master/README.md
>  
> Cheers,
> Mehdi
>  
> Am 20. Mai 2020 20:40:31 MESZ schrieb Jose Marinez <jedi_papi@yahoo.com>:
>>   Thank you all or the responses.Wow. This seems like a big issue for
>> Android and iOS. How many people like me that are tethering, go about
>> convinced their devices are inheriting the VPN connection? Are there
>> channels to communicate with both Google and Apple about this? @Harsh
>> - I do have a rooted Android device with Wireguard on I can use for
>> tethering. Say I build my kernel module from the list you sent. How
>> do I go about integrating it into the Wireguard Android
>> app?Thanks,JoseOn Wednesday, May 20, 2020, 1:53 PM, Harsh Shandilya
>> <me@msfjarvis.dev> wrote:>  
>>>  
>>> On May 20 2020, at 10:57 pm, Jose Marinez <jedi_papi@yahoo.com> wrote:
>>>  
>>>>   Hi Guys,
>>>>    
>>>> Can you tell me if this is working as it should?...
>>>>    
>>>> I have a phone with Wireguard on. I share the connection via
>>>> tethering/hotspot. When I check the IP on the tethered device I don't
>>>> see the same IP as my Wireguard endpoint. What I do see is an IP from
>>>> the phone's mobile network, the one running Wireguard. 
>>>>    
>>>> Is this right? Does this mean that traffic from that tethered device
>>>> not using the Wireguard connection? I'm confused.
>>>>    
>>>>    
>>>> Thanks,
>>>> Jose
>>>  
>>>>    
>>>  
>>> At least on Android, tethering data is *not* routed through your
>>> VPN. If
>>> you want that to happen, you will have to use the WireGuard kernel
>>> module which requires a rooted device and a custom kernel. On some
>>> supported devices
>>> (https://github.com/WireGuard/android-wireguard-module-builder/tree/master/kernels)
>>> you can use root access to install the required module automatically
>>> through the app, on your stock kernel.
>>>  
>>> Harsh
>>>>  
>  
> --  
> Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.
>

  reply	other threads:[~2020-05-21  7:05 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <1587211445.2302354.1589995651547.ref@mail.yahoo.com>
2020-05-20 17:27 ` Jose Marinez
2020-05-20 17:53   ` Harsh Shandilya
2020-05-20 18:40     ` Jose Marinez
     [not found]       ` <81BFEC8F-2985-447E-9B08-5671682DBD3E@43.yt>
2020-05-20 20:53         ` Jose Marinez
2020-05-21  7:05           ` Harsh Shandilya [this message]
2020-05-21 14:22             ` Jose Marinez
2020-05-21 14:28               ` Harsh Shandilya
2020-05-21 23:20                 ` Jose Marinez
     [not found] <1911672182.4980335.1590508735704@mail.yahoo.com>
2020-05-26 16:03 ` Harsh Shandilya

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=220C4723-011D-4322-8213-820B36A15186@getmailspring.com \
    --to=me@msfjarvis.dev \
    --cc=jedi_papi@yahoo.com \
    --cc=mx@43.yt \
    --cc=wireguard@lists.zx2c4.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).