WireGuard Archive on lore.kernel.org
 help / color / Atom feed
* Android 10 and DNS
@ 2019-09-26 21:49 Mahlon E. Smith
  2019-10-16 20:23 ` Jason A. Donenfeld
  0 siblings, 1 reply; 3+ messages in thread
From: Mahlon E. Smith @ 2019-09-26 21:49 UTC (permalink / raw)
  To: wireguard


Heya all.  New to the list, apologies for not continuing this
conversation on the thread at:

    https://lists.zx2c4.com/pipermail/wireguard/2019-September/004498.html


We're piloting Wireguard at my $dayjob, and so far it has been working
extremely well.  One of our testers just upgraded to Android 10, and
reported that it no longer was functional after the update.

I confirmed he -is- actually negotiated, and can reach across the VPN
without issue.  He can't resolve anything, however.

(We installed Termux and the dnsutils package -- resolution works fine
manually with the 'host' utility and the servers we've specified in the
config -- just not working transparently, which is a deal breaker for
our end users.)


I'm not sure what else to gather that would be helpful.  It appears
Wireguard is no longer using the 'DNS =' client config under 10.

--
Mahlon E. Smith  
http://www.martini.nu/
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Android 10 and DNS
  2019-09-26 21:49 Android 10 and DNS Mahlon E. Smith
@ 2019-10-16 20:23 ` Jason A. Donenfeld
  2019-10-16 20:34   ` Mahlon E. Smith
  0 siblings, 1 reply; 3+ messages in thread
From: Jason A. Donenfeld @ 2019-10-16 20:23 UTC (permalink / raw)
  To: Mahlon E. Smith; +Cc: WireGuard mailing list

Android 10 sometimes tries to forcibly enable the DNS-over-TLS or
DNS-over-HTTPS setting. Maybe try disabling that. Another gotcha on
Android 10 appears to be the Data Saver setting.
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Android 10 and DNS
  2019-10-16 20:23 ` Jason A. Donenfeld
@ 2019-10-16 20:34   ` Mahlon E. Smith
  0 siblings, 0 replies; 3+ messages in thread
From: Mahlon E. Smith @ 2019-10-16 20:34 UTC (permalink / raw)
  To: Jason A. Donenfeld; +Cc: WireGuard mailing list

[-- Attachment #1.1: Type: text/plain, Size: 378 bytes --]

On Wed, Oct 16, 2019, Jason A. Donenfeld wrote:
> Android 10 sometimes tries to forcibly enable the DNS-over-TLS or
> DNS-over-HTTPS setting. Maybe try disabling that. Another gotcha on
> Android 10 appears to be the Data Saver setting.


Yep, that was it.  Disabling the "Private DNS" system setting, all is
well again.

--
Mahlon E. Smith  
http://www.martini.nu/

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, back to index

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-09-26 21:49 Android 10 and DNS Mahlon E. Smith
2019-10-16 20:23 ` Jason A. Donenfeld
2019-10-16 20:34   ` Mahlon E. Smith

WireGuard Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/wireguard/0 wireguard/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 wireguard wireguard/ https://lore.kernel.org/wireguard \
		wireguard@lists.zx2c4.com
	public-inbox-index wireguard

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/com.zx2c4.lists.wireguard


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git