offline :(

[vitaly-zdanevich]

Installed on AWS.

Client Android works.

In my config I removed ipv6 addresses because I do not use it, my Gentoo kernel is also without ipv6 - so with default config it cannot connect.

Client Gentoo is offline after wg-quick up wg0 (tried curl, ping. Firefox). Start log:

[#] ip link add wg0 type wireguard
[#] wg setconf wg0 /dev/fd/63
[#] ip -4 address add 10.49.0.3 dev wg0
[#] ip link set mtu 1420 up dev wg0
[#] resolvconf -a wg0 -m 0 -x
[#] wg set wg0 fwmark 51820
[#] ip -4 route add 0.0.0.0/0 dev wg0 table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
[#] sysctl -q net.ipv4.conf.all.src_valid_mark=1
[#] iptables-restore -n

ifconfig after up on client:

enp0s25: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.0.112  netmask 255.255.255.0  broadcast 192.168.0.255
        ether 00:21:cc:d6:34:f6  txqueuelen 1000  (Ethernet)
        RX packets 8094  bytes 7764389 (7.4 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 6819  bytes 1871707 (1.7 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device interrupt 20  memory 0xf1500000-f1520000  

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 6  bytes 504 (504.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 6  bytes 504 (504.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

wg0: flags=209<UP,POINTOPOINT,RUNNING,NOARP>  mtu 1420
        inet xx.xx.x.x  netmask 255.255.255.255  destination xx.xx.x.x
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 1000  (UNSPEC)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 10  bytes 1480 (1.4 KiB)
        TX errors 0  dropped 27 overruns 0  carrier 0  collisions 0

On server:

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 9001
        inet 172.16.255.102  netmask 255.255.254.0  broadcast 172.16.255.255
        inet6 fe80::438:acff:fe73:a90e  prefixlen 64  scopeid 0x20<link>
        inet6 2a05:d014:60c:4400:22b9:ab4:b1a8:bf88  prefixlen 128  scopeid 0x0<global>
        ether 06:38:ac:73:a9:0e  txqueuelen 1000  (Ethernet)
        RX packets 1872348  bytes 1611186940 (1.6 GB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1770245  bytes 1522273035 (1.5 GB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 fd00::d:bb75  prefixlen 128  scopeid 0x0<global>
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 1014  bytes 108096 (108.0 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1014  bytes 108096 (108.0 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

wg0: flags=209<UP,POINTOPOINT,RUNNING,NOARP>  mtu 8921
        inet 10.49.0.1  netmask 255.255.0.0  destination 10.49.0.1
        inet6 2001:db8:a160::1  prefixlen 48  scopeid 0x0<global>
        unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 1000  (UNSPEC)
        RX packets 122339  bytes 113528880 (113.5 MB)
        RX errors 82  dropped 0  overruns 0  frame 82
        TX packets 109509  bytes 91839728 (91.8 MB)
        TX errors 0  dropped 181 overruns 0  carrier 0  collisions 0

wg returns

interface: wg0
  public key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
  private key: (hidden)
  listening port: 38994
  fwmark: 0xca6c

peer: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
  preshared key: (hidden)
  endpoint: x.xx.xxx.xxx:xxxxx
  allowed ips: 0.0.0.0/0
  transfer: 0 B received, 148 B sent

Tried to add MTU = 9001 to /etc/wireguard.conf (I see changed MTU in wg-quick up wg0) but also offline.

Country: Belarus.

$ traceroute google.com
google.com: Temporary failure in name resolution
Cannot handle "host" cmdline arg `google.com' on position 1 (argc 1)

linux-kernel-config.txt

@jackivanov please help

[jackivanov]

I can't really say. There's something env specific. I never used Gentoo. Try to do more debug like ping the WireGuard server IP, check the local firewall rules, etc

[vitaly-zdanevich]

Wireguard VPN from phone to the same server works.

I have no firewall.

[vitaly-zdanevich]

In menuconfig activate
CONFIG_CRYPTO_DH
CONFIG_CRYPTO_ECDH
CONFIG_CRYPTO_ECDSA

See my working kernel config: https://gitlab.com/vitaly-zdanevich-configs/linux-kernel-thinkpad-t430/-/blob/5fbb4e5524e870e85caa6df7fcc16fb7a04f8560/.config