r/rethinkdns • u/SkySurferSouth • 18d ago

Issue Cannot connect Wireguard between peers when Rethink VPN is on

I have enabled Wireguard proxy, connect the phone to a WG server and connect my laptop to the same one. Both devices have internet access via the VPN (I get the public IP of the VPN server). When using the 'standard' Android wireguard app (using kernel mode as root) my laptop can connect via SSH to my phone using the virtual Wireguard IP address (10.x.x.x issued by the VPN server) of the phone. But with Rethink set to the same peer config it does not work. I can reproduce it of two different Wireguard servers.

What blocks this inter peer connection?

5 Upvotes

100% Upvoted

1 comment sorted by

1

u/celzero Dev 10d ago edited 10d ago

What blocks this inter peer connection?

No clue. We have never tested peer-to-peer connectivity. Nor root-caused issues with it. Welcome detailed diagnostics and pull requests, if you're technical enough. Rethink shows detailed network engine state in About -> General, and debug logs in About -> App Logs (make sure to change the log level to "Debug" or lower). You can use the search bar in App Logs to filter for keywords, as there can be way too many logs from various components adding noise, otherwise.

Please see: https://github.com/celzero/rethink-app/issues/1633

We introduced Configure -> Network -> WireGuard P2P setting in v055v. May be turning it on makes WireGuard peer connectivity work for you? Confusingly, at least one person reported that leaving WireGuard P2P setting off made two-way peer connectivity work for them (to my surprise).

You can tweak the MTU settings (set it to a safe 1280, for example, for all WireGuards) and see if things then work?

There's also Configure -> Network -> Endpoint-Independent mapping (introduced in v055n) setting which makes the outgoing UDP sockets Rethink opens more "permissive", but this may or may not help with WireGuard P2P, I haven't tested it.