Not able to access all Docker containers over Wireguard

[adminmat]

I've been using Wireguard successfully for a while. I can connect to all the devices on my local network while I'm away. Recently noticed I can't access several Docker containers, on the local network while I'm away from my house and connected to my unRAID server via Wireguard RTA...  while some containers I can reach.

 

For example: I can access an Agent DVR container by navigation to the ip addrsss / port (192.168.60.80:8090) but I can not access the Firefox, Plex, Tautulli containers using their IP address and port. They all are on custom networks (br0.60). I tried IPvaln and MACvlan. Tried "Host access to custom networks." Same result. 

 

Here are the networks I'm allowing for this WG peer: AllowedIPs=10.253.0.1/32, 192.168.10.0/24, 192.168.60.0/24, 192.168.100.0/24, 0.0.0.0/0

 

Note: I can connect to all these containers using IP address when I'm on the same local network not using a VPN. 

 

Thoughts? 

tower-diagnostics-20231019-1354.zip

[adminmat]

Bumping this back up. 

[ljm42]

This looks to be the same as https://forums.unraid.net/topic/145706-remote-tunneled-access-wireguard-clients-lose-access-to-anything-but-server-upon-docker-start/ , it will be fixed in the next release 

 

[adminmat]

5 hours ago, ljm42 said:

This looks to be the same as https://forums.unraid.net/topic/145706-remote-tunneled-access-wireguard-clients-lose-access-to-anything-but-server-upon-docker-start/ , it will be fixed in the next release 

 

 

I don't think this sounds like my issue. As I can reach all devices on my local network when accessing from a peer to my network via a Wireguard tunnel remotely except for some docker containers. I can reach one docker container, AgentDVR by navigating to the IP address and port number of that container. All other containers which are all on the same custom network (br0.60) as AgentDVR I cannot reach. 

 

Have you heard of this? I've been stumped for months. 

 

[MrGrey]

Take a stab at configuring OpenVPN as a backup. It might become your main, or just a backup.

 

I mostly dropped wireguard after doing similar.

 

MrGrey.

[adminmat]

Yes, definitely need a backup solution. You running OpenVPN as a Container? or on another device? 

 

[ljm42]

On 10/26/2023 at 3:55 PM, adminmat said:

I don't think this sounds like my issue.

 

Both issues are about giving access to specific network interfaces. In the other topic the interface is called vhost0. In your topic it is called br0.60. Both should be fixed in the next release.

[adminmat]

Thanks for the explanation.