IP routing between two sites and allowing external access to both via Wireguard

Shane Hastings

6/24/24, 10:49 PM

I have two Proxmox notes, in two separate locations. They are connected via a Wireguard Tunnel between the two sites (A and B). This tunnels all traffic destined for the other site through the tunnel on both.

All servers on Node A use the range 10.0.0.0/24.
All servers on Node B use the range 10.10.0.0/24

Any traffic from A destined for B, say for example, 10.10.0.100, would go via the Wireguard tunnel (wgAMS) to B. The reverse is the same from Node B (over wgLON).

However: I also have another Wireguard interface running on Node A (wg0 interface). I use this to allow remote access from mobile devices, laptops etc.

Clients connected to Node A over this wg0 interface (10.7.0.0/24) can access everything on Node A with no problems, however cannot reach anything in Node B. I've tried serveral different things but still can't get these to route correctly.

The output of ip route from Node A is below.

default via <WAN_IP> dev vmbr0 proto kernel onlink
10.0.0.0/24 dev vmbr2 proto kernel scope link src 10.0.0.1
10.7.0.0/24 dev wg0 proto kernel scope link src 10.7.0.1
10.10.0.0/24 dev wgAMS scope link
10.10.9.0/31 dev wgAMS proto kernel scope link src 10.10.9.0

Looking at this, it appears to me that these clients should be able to access 10.10.0.0/24 (Node B) - but they can't. Running tcpdump on the wg0 interface I can see sample ICMP/ping traffic but no responses.

I've tried adding PostUp rules to route the traffic on the wg0 interface config via wgAMS for Node B IPs but this didn't help either.

I largely followed this guide for the site-to-site tunnel, for reference.

0 + 1

routing

proxmox

wireguard

A.B

6/25/24, 7:17 AM

missing in the question: The output of ip route from Node B, and actually the whole setup on both sides.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: IP routing between two sites and allowing external access to both via Wireguard

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.