I am trying to setup a Wireguard network. The subnet is 10.253.0.0/24. The reason I want to do this is so I can remotely access my Unraid server. I can try Tailscale as a fallback but trying to do everything myself on Wireguard to avoid third parties.

 

I am trying to setup a Linux LXC running adguard to the Wireguard network. I am having issues where I will be able to get a handshake but either not be able to ping any my Unraid server (which has the ip of 10.253.0.1 on the wireguard server) OR I will be able to but won't have internet access. For example right now I have setup as "remote tunneled access" and can ping 10.253.0.1 but not 1.1.1.1.

 

When I try to ping I get the following error:

PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
From 10.253.0.1 icmp_seq=1 Destination Host Unreachable

 

My config is as follows:

 

[Interface]

#adguard-lxc

PrivateKey=[redacted]

Address=10.253.0.9/32

DNS=1.1.1.1

[Peer]

#unraidwg

PersistentKeepalive=25

PublicKey=[]

Endpoint=wg.redacted.com:51820

AllowedIPs=0.0.0.0/0

 

I have the following static route setup on my unifi router:

 

I appreciate you for taking the time to look at this. Hopefully I can get this resolved.

 

What is bothering me is I feel like I had this working last night at some point and then it stopped working. I have cycled through so many configs (server access where I cannot ping 10.253.0.1, remote lan access, remote tunneled, etc) trying to get this to work. Ultimately the purpose of this container is to run adguard as a DNS for the wireguard network and wildcard redirect to my domain.

I solved this and it was user error. In all my troubleshooting of the Wireguard config, I added allowed IPs of 0.0.0.0/0 to multiple devices connected to the network on the Unraid page. I think what this did was try to send traffic on the wireguard network to those devices. Once I deleted this (after reading the help text on the wireguard page which helped immensely), the issue was solved.

 

Leaving this up to help others.