Traffic flow stopping

Traffic flow stopping

[Mike O'Connor]

Hi All

So I've been using Wireguard to route part of my class C to my home for
about 4 months now, but for the last few days the traffic stops for a
short while every few minutes.

I can not think of anything which has changed, turning OpenVPN back on
fixes everything. I've tried reducing the keepalive thinking the NAT
route could have been the issue but that has not help.

A few detail:

Version 0.0.20181119-wg1~trusty 

CLIENT:

root@gw:~# wg
interface: wg-p2p
  public key: 3zLzaSoTwf+h5AYgvGMz0XnGYJGQX4tPbZcMziULk1I=
  private key: (hidden)
  listening port: 51820
  fwmark: 0xca6c

peer: xSccymCZDUxcD7vFrGtwAiyYGclQ1hUQCmy8nLDLLgc=
  endpoint: 202.191.98.193:51820
  allowed ips: 0.0.0.0/0, ::/0
  latest handshake: 21 seconds ago
  transfer: 3.58 GiB received, 12.20 GiB sent
  persistent keepalive: every 10 seconds
root@gw:~# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.


^C
--- 8.8.8.8 ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 4999ms


SERVER:

interface: wg-p2p
  public key: xS*gc=
  private key: (hidden)
  listening port: 51820

peer: 3z*k1I=
  endpoint: 203.122.224.57:51820
  allowed ips: 0.0.0.0/0
  latest handshake: 21 seconds ago
  transfer: 12.20 GiB received, 3.58 GiB sent
  persistent keepalive: every 10 seconds

Any ideas ? Any more tests or debug (if you tell me how) I could provide ?


Thanks

Mike

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Traffic flow stopping

[Kalin KOZHUHAROV]

Hello Mike,

On Tue, Jan 8, 2019 at 3:20 AM Mike O'Connor <mike@oeg.com.au> wrote:
> So I've been using Wireguard to route part of my class C to my home for
> about 4 months now, but for the last few days the traffic stops for a
> short while every few minutes.
>
Does it start on its own "after few minutes"?

> route part of my class C
>
Your configs show "allowed ips: 0.0.0.0/0, ::/0" that is you are
routing everything at wireguard level.
Or are you filtering/mangling in iptables ("fwmark: 0xca6c") only?

> I can not think of anything which has changed, turning OpenVPN back on
> fixes everything. I've tried reducing the keepalive thinking the NAT
> route could have been the issue but that has not help.
>
"turning OpenVPN back on" ?? What/where do you do that?

When ping fails, check your next hop:
ip route get 8.8.8.8

It may mess up your default route, examine network config before/after
"turning on OpenVPN"...
bash -c "ip addr; ip route; wg; cat /etc/resolv.conf; ip route get
8.8.8.8; ping -c3 8.8.8.8"

> Any ideas ? Any more tests or debug (if you tell me how) I could provide ?
>
Anything changing periodically like services that die and are
restarted, cronjobs?

Cheers,
Kalin.
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard