From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.5 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,NICE_REPLY_A, SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 53E2CC432BE for ; Fri, 27 Aug 2021 17:16:41 +0000 (UTC) Received: from lists.zx2c4.com (lists.zx2c4.com [165.227.139.114]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 3704360EB5 for ; Fri, 27 Aug 2021 17:16:40 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 3704360EB5 Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=tootai.net Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=lists.zx2c4.com Received: by lists.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 097facf0; Fri, 27 Aug 2021 17:16:26 +0000 (UTC) Received: from mail1.tootai.net (mail1.tootai.net [213.239.227.108]) by lists.zx2c4.com (ZX2C4 Mail Server) with ESMTP id d6f991ea for ; Fri, 27 Aug 2021 17:16:22 +0000 (UTC) Received: from mail1.tootai.net (localhost [127.0.0.1]) by mail1.tootai.net (Postfix) with ESMTP id 6F60B60817EC for ; Fri, 27 Aug 2021 19:16:22 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=tootai.net; s=mail; t=1630084582; bh=IwvThRmw7G5WhnDx2w0XdDdtYZ45gtNP2SyI7/6qsiI=; h=Subject:To:References:From:Date:In-Reply-To:From; b=MbPbH670Qfmnx1Dw2rCe/GPwelT7z8e1bOQaViC+LuAusZRC5WtUtmecicm0eoQWg aNaP3MliOx3KFLcWVfl3ao72BfQtRCAi/2+sx4ARY23EmfV6a6f7UeCJ9iAVZ3R5Kb mE7bBsxqnAuOwY1JH008htR5614hZrxg3ZEiFnQ0= Received: from [192.168.10.24] (unknown [192.168.10.24]) by mail1.tootai.net (Postfix) with ESMTPA id 407DD6081880 for ; Fri, 27 Aug 2021 19:16:22 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=tootai.net; s=mail; t=1630084582; bh=IwvThRmw7G5WhnDx2w0XdDdtYZ45gtNP2SyI7/6qsiI=; h=Subject:To:References:From:Date:In-Reply-To:From; b=MbPbH670Qfmnx1Dw2rCe/GPwelT7z8e1bOQaViC+LuAusZRC5WtUtmecicm0eoQWg aNaP3MliOx3KFLcWVfl3ao72BfQtRCAi/2+sx4ARY23EmfV6a6f7UeCJ9iAVZ3R5Kb mE7bBsxqnAuOwY1JH008htR5614hZrxg3ZEiFnQ0= Subject: Re: ipv6 connexion fail - ipv4 OK To: wireguard@lists.zx2c4.com References: <20210827211412.3ed5f170@natsu> From: Daniel Message-ID: <3ec547c6-c846-e5be-e276-ace7862f5cb7@tootai.net> Date: Fri, 27 Aug 2021 19:16:21 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 In-Reply-To: <20210827211412.3ed5f170@natsu> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: fr-FR X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: wireguard@lists.zx2c4.com X-Mailman-Version: 2.1.30rc1 Precedence: list List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: wireguard-bounces@lists.zx2c4.com Sender: "WireGuard" Hi ROman Le 27/08/2021 à 18:14, Roman Mamedov a écrit : > On Thu, 26 Aug 2021 13:14:00 +0200 > Daniel wrote: > >> Correction >> >> Le 25/08/2021 à 17:25, Daniel a écrit : >>> Hi list, >>> >>> I setup wireguard on a server running Debian 11 and get it to work with >>> 2 clients (Debian 11 and Ubuntu 20.04). Clients and server are on >>> separate networks, one client behind a FW the other direct on Internet, >>> no FW at all (VPS). >>> >>> With this setup and ipv4 connection to the public IP of the server, >>> everything is working as expected, ipv4 as well as ipv6 are passing >>> smoothly. >>> >>> Now I want to connect using the ipv6 address of the wg interface as both >>> clients and server have ULA ipv6. >> Here is GUA to read. >> >>> This fail, wg show that connection is >>> established but VPN is not usable. It's not a FW problem as I can ssh to >>> the ipv6 address, as well as a netcat test from/to server IP -from each >>> client- on an UDP port is working properly. Also, >>> net.ipv6.conf.all.forwarding=1 is activated in sysctl.conf >>> >>> All network stuff is done in /etc/network/interfaces which call the >>> config file. The ipv6 address of the server is affected _to the >>> wireguard interface_ (in ipv4 it's another interface who take care of >>> the public address) >>> >>> Server version is wireguard-tools v1.0.20210223. >>> >>> If someone have any hint, thanks to share ;) > IPv6 requires the in-WG MTU to be 20 bytes less than when running over IPv4. > Try reducing it accordingly. Tried 1400, 1396 and 1392, problem stay. Thanks for your help -- Daniel