From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: jens@viisauksena.de Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id e9786849 for ; Thu, 16 Feb 2017 18:06:28 +0000 (UTC) Received: from viisauksena.de (v32412.1blu.de [178.254.39.111]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 6fc8c59b for ; Thu, 16 Feb 2017 18:06:28 +0000 (UTC) Received: from [192.168.0.38] (p5B20FBB9.dip0.t-ipconnect.de [91.32.251.185]) by v32412.1blu.de (Postfix) with ESMTPSA id C777E20416 for ; Thu, 16 Feb 2017 19:06:40 +0100 (CET) Subject: Re: VXLAN To: wireguard@lists.zx2c4.com References: From: jens Message-ID: Date: Thu, 16 Feb 2017 19:05:32 +0100 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------F22C1732FCC68E970B4A108A" List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , This is a multi-part message in MIME format. --------------F22C1732FCC68E970B4A108A Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable i also understand it like you want to use vxlan0 to connect each other, surprisingly we are playing with this actually also - but run in difficulties with v6 and vxlan doing somethings like on each endpoint (both have wg0 , and this is working fine with v6 wg internal adresses) |ip link add vxlan0 type vxlan id 42 local dstport 4789 nolearning bridge fdb add to dst dev vxlan0 so fyi: (german only) https://forum.freifunk.net/t/wireguard-0-0-20161230-linuxkernel-3-18-gluo= n-v2016-2-2/14122/16 | you may consider gretap tunnel - which already is working, but i am also interested in workling vxlan setups On 12.02.2017 22:07, info wrote: > Hello, > > I would love to use VXLANs for my network to separate stuff, although > I'm a bit struggling. My topology looks like this: > > VM A --> AMSTERDAM -> FRANKFURT -> VIENNA --> VM B > > '->' indicates a Wireguard tunnel > '-->' is a physical link > > Actually I'm configuring a VXLAN Interface in AMSTERDAM and VIENNA, > with the tunnel IPs as remote/local. > > Anyway, somehow I'm facing a strange issue here. VM A and VM B can > ping each other already, although nothing else works. I cannot do > curl/wget between the VMs nor iperf, etc. > > Do you know if my topology above should work? VM A can reach VM B > without VXLAN just fine over the other hops, as well AMSTERDAM and > VIENNA can reach each other fully. > > No firewall enabled nor anything else. Allowed-IPs is 0.0.0.0/0,::/0 > on all tunnels. > > My guess was that this is somewhat MTU related, tried 1200 on the > VXLAN interfaces - no difference. > > > _______________________________________________ > WireGuard mailing list > WireGuard@lists.zx2c4.com > https://lists.zx2c4.com/mailman/listinfo/wireguard --=20 make the world nicer, please use PGP encryption --------------F22C1732FCC68E970B4A108A Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit

i also understand it like you want to use vxlan0 to connect each other,
surprisingly we are playing with this actually also - but run in difficulties with v6 and vxlan

doing somethings like on each endpoint (both have wg0 , and this is working fine with v6 wg internal adresses)
ip link add vxlan0 type vxlan id 42 local <local_wg_v6> dstport 4789 nolearning
bridge fdb add to <remote_mac> dst <remote_wg_v6> dev vxlan0

so fyi: (german only)
https://forum.freifunk.net/t/wireguard-0-0-20161230-linuxkernel-3-18-gluon-v2016-2-2/14122/16
you may consider gretap tunnel - which already is working,
but i am also interested in workling vxlan setups


On 12.02.2017 22:07, info wrote:
Hello,

I would love to use VXLANs for my network to separate stuff, although I'm a bit struggling. My topology looks like this:

VM A --> AMSTERDAM -> FRANKFURT -> VIENNA --> VM B

'->' indicates a Wireguard tunnel
'-->' is a physical link

Actually I'm configuring a VXLAN Interface in AMSTERDAM and VIENNA, with the tunnel IPs as remote/local.

Anyway, somehow I'm facing a strange issue here. VM A and VM B can ping each other already, although nothing else works. I cannot do curl/wget between the VMs nor iperf, etc.

Do you know if my topology above should work? VM A can reach VM B without VXLAN just fine over the other hops, as well AMSTERDAM and VIENNA can reach each other fully.

No firewall enabled nor anything else. Allowed-IPs is 0.0.0.0/0,::/0 on all tunnels.

My guess was that this is somewhat MTU related, tried 1200 on the VXLAN interfaces - no difference.


_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard


-- 
make the world nicer, please use PGP encryption
--------------F22C1732FCC68E970B4A108A--