I recently created a wireguard tunnel of the type "tunneled access for dockers" using mullvad. Took some doing, but I got dockers on it with portforwarding etc working. The issue I'm having is any docker running on the wireguard docker network (172.31.201.0/24) can only access other dockers on that network, or local address on my main network (192.168.86.0/24). Unfortunately though, I run a couple of VLANs and I'd like the wireguard docker network to be able to access those as well (ping/traceroute can't find routes right now). My understanding of wireguard is pretty basic at this point, so perhaps there's something simple I'm missing? Here's my wireguard config, but let me know what else I can post.

 

[Interface]
PrivateKey=REMOVED
Address=10.65.30.79
PostUp=logger -t wireguard 'Tunnel WireGuard-wg1 started'
PostDown=logger -t wireguard 'Tunnel WireGuard-wg1 stopped'
PostUp=ip -4 route flush table 201
PostUp=ip -4 route add default via 10.65.30.79 dev wg1 table 201
PostUp=ip -4 route add 192.168.86.0/24 via 192.168.86.1 dev br0 table 201
PostUp=ip -4 route add 192.168.84.0/24 via 192.168.86.1 dev br0 table 201
PostDown=ip -4 route flush table 201
PostDown=ip -4 route add unreachable default table 201
PostDown=ip -4 route add 192.168.86.0/24 via 192.168.86.1 dev br0 table 201
PostDown=ip -4 route add 192.168.84.0/24 via 192.168.86.1 dev br0 table 201

[Peer]
PublicKey=REMOVED
Endpoint=REMOVED
AllowedIPs=0.0.0.0/0

 

This is essentially Mullvad's default config, but I added the kill switch lines from here, then I added the PostUp/Down for 192.168.84.0/24 hoping that would work. Any ideas what I'm doing wrong? Thanks for the help.

Bumping this. I've now realized I can't any URLs served by SWAG unless I'm on my private network (192,.168,86.0/24) as well. Basically it seems like any docker on the wireguard network is somehow only able to receive traffic from the wireguard network or 192.168.86.0/24.

 

Do I need to change something in Unraid's settings?