Development discussion of WireGuard
 help / color / mirror / Atom feed
From: Pierre Grimme <gamedev.pierre.grimme@gmail.com>
To: wireguard@lists.zx2c4.com
Subject: Feature Request: Configurable Re-Resolving of DNS Endpoints
Date: Wed, 27 Apr 2022 20:50:58 +0200	[thread overview]
Message-ID: <CAHjGJ4PPALxp8x5kCVFb3a2_0CydJF2CzP0LdFmnZ7YfCh4MRA@mail.gmail.com> (raw)

[Situation]
Using a Domain as Endpoint on your WG-Client to reach the server with
a dynamic IP address breaks the connectivity when the server changes
its public IP address.
Wireguard only resolves domains once and uses from there on the
resolved IP address. This is a huge problem in the private sector,
where static IP addresses are not common. Even worse is the situation
with Dual-Stack-Lite configurations, where your public IPv4 address is
not reachable from outside. You have to use domains pointing to your
current IPv6 address to get connection to your local network.
The end user does not understand why the connection is not working
anymore, especially on mobile devices. Also, a workaround with the
re-resolve script is not possible due to lack of system file access
and permissions. Private internet connections are force quitted every
24h. More often if something goes wrong.

[Intention]
There is an open-source project called netmaker which builds meshed
networks with wireguard vpn connections. If you try to self-host this
program on your private internet connection you need an endpoint
address which is static. The need here is to input an address
dynamically via a domain so you could always reach your server master.

[Solution]
The solution would be to re-resolve the endpoint address from time to
time. The big benefit is that your endpoint IP could be dynamic. Your
domain can point to a cname, a or aaaa record, which would enable
people with a Dual-Stack-Lite internet connection a "stable"
connection. Due to the concept of wireguard to be minimalistic it
would be perfect, if the feature is off by default and only turned on
when you enable it in wg-interface config. It would be great to have a
configurable parameter e.g "dns-resolve-duration = 10 #in seconds"
The solution should be usable with all available wireguard clients.

             reply	other threads:[~2022-04-27 18:59 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-04-27 18:50 Pierre Grimme [this message]
     [not found] ` <CAHx9mscwNEn9Ao3Br_x6tEFJg4uBrf1K8wXaJoM2jZf_5=C52Q@mail.gmail.com>
2022-04-28  5:55   ` Pierre Grimme

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=CAHjGJ4PPALxp8x5kCVFb3a2_0CydJF2CzP0LdFmnZ7YfCh4MRA@mail.gmail.com \
    --to=gamedev.pierre.grimme@gmail.com \
    --cc=wireguard@lists.zx2c4.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).