Connection issues with Google Fi

Connection issues with Google Fi

[Lane Russell]

[-- Attachment #1.1: Type: text/plain, Size: 641 bytes --]

Using a Nexus 6P on Google Fi, I'm noticing that when roaming between cellular and WiFi, I occasionally lose the ability to use WireGuard. Coming from Verizon, I didn't previously have this issue.

I can only assume this has something to do with Fi manipulating the routing table in such a way that breaks WireGuard connectivity. I verified that WiFi Assitant is disabled. A simple tunnel-up, tunnel-down doesn't seem to fix the issue. Rebooting fixes the issue.

Next time the issue occurs, I can dump the ip rule list, but may need some assistance figuring out which ip tables to pull. Is this the info that will be needed to troubleshoot?

[-- Attachment #1.2: Type: text/html, Size: 712 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Jason A. Donenfeld]

Hi Lane,

Are you using the kernel module or the userspace implementation? Can
you send a debug log?

Jason
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Lane Russell]

I believe I'm using the userspace implementation. I have stock Android on my Nexus 6P and installed the WireGuard app from Google Play.

I am able to consistently replicate the issue by bringing the WireGuard tunnel up while connected to cellular only, then connecting to WiFi.

Log 1: After bringing up tunnel on cellular, then roaming to Wifi
https://s3.amazonaws.com/pyrahex-misc/logs/wireguard-log_1_cellular2wifi.txt


Log 2: After connecting to WiFi, I restarted the WireGuard tunnel
https://s3.amazonaws.com/pyrahex-misc/logs/wireguard-log_2_restart_tunnel.txt



Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Thursday, September 27, 2018 10:48 AM, Jason A. Donenfeld <Jason@zx2c4.com> wrote:

> Hi Lane,
>
> Are you using the kernel module or the userspace implementation? Can
> you send a debug log?
>
> Jason


_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Lane Russell]

Interesting, now that I have a better chance to look at this, I see that the logs show:

Failed to send data packet write udp6 [::]:49896->[2607:7700:0:8::48ca:860f]:51820

This is interesting because the DNS name my client interface is pointed at does not have a AAAA record.


Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Thursday, September 27, 2018 12:23 PM, Lane Russell <lanerussell@protonmail.com> wrote:

> I believe I'm using the userspace implementation. I have stock Android on my Nexus 6P and installed the WireGuard app from Google Play.
>
> I am able to consistently replicate the issue by bringing the WireGuard tunnel up while connected to cellular only, then connecting to WiFi.
>
> Log 1: After bringing up tunnel on cellular, then roaming to Wifi
> https://s3.amazonaws.com/pyrahex-misc/logs/wireguard-log_1_cellular2wifi.txt
>
> Log 2: After connecting to WiFi, I restarted the WireGuard tunnel
> https://s3.amazonaws.com/pyrahex-misc/logs/wireguard-log_2_restart_tunnel.txt
>
> Sent with ProtonMail Secure Email.
>
> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> On Thursday, September 27, 2018 10:48 AM, Jason A. Donenfeld Jason@zx2c4.com wrote:
>
> > Hi Lane,
> > Are you using the kernel module or the userspace implementation? Can
> > you send a debug log?
> > Jason


_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Jason A. Donenfeld]

Hi Lane,

Ahh this is T-Mobile XLAT/CLAT happening. I'll put a fix for this into
the next android client release. Thanks for mentioning it.

Jason
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Lane Russell]

Ah, thanks for your help! I'll be off to learn about XLAT/CLAT.
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Jason A. Donenfeld]

Hi Lane,

The fix should be released. Let me know if that actually does the job.

Jason
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Lane Russell]

Installed the new release and tried roaming from Fi service to WiFi, all appears to be working as expected. Thanks for following up!
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Connection issues with Google Fi

[Brian Candler]

On 28/09/2018 11:00, wireguard-request@lists.zx2c4.com wrote:
> Failed to send data packet write udp6 [::]:49896->[2607:7700:0:8::48ca:860f]:51820
>
> This is interesting because the DNS name my client interface is pointed at does not have a AAAA record.

But does it have IPv4 address 72.202.134.15? (48ca:860f converted from 
hex).  If so, that's DNS64 in action.

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard