User avatar
Summer Jo v_enby ☀️neocat_melt_3 @ShadowJonathan@tech.lgbt
2y
lmao what is it about outgoing wireguard tunnels that makes federation to us break
2
0
2
0
User avatar
pancakes nonbinary_cat @pancakes@meow.company
2y
@ShadowJonathan do you mean instances that are running through wireguard?
1
0
1
0
User avatar
Summer Jo v_enby ☀️neocat_melt_3 @ShadowJonathan@tech.lgbt
2y
@pancakes there's incoming wireguard tunnels (those seem to work), and wireguard tunnels for outgoing traffic

it seems to break on the latter one, idk what exactly the setup is, but i assume for "outgoing", any connect attempts going to an IP will try to route via that tunnel, instead of directly
1
0
1
0
User avatar
pancakes nonbinary_cat @pancakes@meow.company
2y
@ShadowJonathan could they also just be timing out? i think masto has a fairly short timeout
1
0
1
0

User avatar
Summer Jo v_enby ☀️neocat_melt_3 @ShadowJonathan@tech.lgbt
2y
@pancakes yeah it is timing out, but it seems to never connect at all, which means that something is amiss
1
0
1
0
User avatar
Advanced Persistent Teapot @http_error_418@hachyderm.io
2y
@ShadowJonathan @pancakes been a while since I did any wireguard config, but you should be able to specify what IPs/networks route via the tunnel and which don't. Is this routing under your control or someone else's?
1
0
0
0
User avatar
Summer Jo v_enby ☀️neocat_melt_3 @ShadowJonathan@tech.lgbt
2y
@http_error_418 @pancakes idk, its not my setup, its two instance admins who ive had poking me about federation issues, that were traced back to this thing
1
0
0
0
User avatar
Advanced Persistent Teapot @http_error_418@hachyderm.io
2y
@ShadowJonathan @pancakes yeah routing through tunnels is a pain and it took me ages to get working reliably, not surprised at all if someone else is having trouble
1
0
0
0
User avatar
Summer Jo v_enby ☀️neocat_melt_3 @ShadowJonathan@tech.lgbt
2y
@http_error_418 @pancakes would you maybe wanna boop me about this over discord? since then i could maybe help these 2 other peeps with their setup
1
0
0
0
User avatar
Advanced Persistent Teapot @http_error_418@hachyderm.io
2y
@ShadowJonathan @pancakes will have to pass on discord, I hate that software with a flaming passion that burns hotter than a thousand suns. But I can find the documentation on wireguard routing config that I used.
1
0
0
0
User avatar
Summer Jo v_enby ☀️neocat_melt_3 @ShadowJonathan@tech.lgbt
2y
@http_error_418 @pancakes fair enough, and yeah please ^^
1
0
0
0
User avatar
Advanced Persistent Teapot @http_error_418@hachyderm.io
2y
@ShadowJonathan @pancakes ok this isn't the one I used but it looks pretty thorough.

https://davidshomelab.com/access-your-home-network-from-anywhere-with-wireguard-vpn/

Basically the main issue I encountered for outbound connections was defining the peer (client) device's address in its config file correctly. When I got it wrong I could see unencrypted packets on the wg virtual interface that never made it to being sent out encrypted on the main network interface, they were just dropped
0
0
0
0