this post was submitted on 28 Feb 2024
2 points (100.0% liked)

homelab

6602 readers
1 users here now

founded 4 years ago
MODERATORS
 

EDIT: It seems something is causing my wireguard hanshake to fail. I can't find much on this particular error except "try rebooting the wg server". I rebooted everything, and I can't get it to connect unless the clients are already connected to the home wifi.

So I installed wg-easy on my one of my virtual machines on my proxmox "homelab". It seems to be working, and I installed the client wireguard-tools on my phone (via app), and on my laptop (EndeavorOS), and on my minecraft server (mineOS also in proxmox).

The web client for wg-easy shows all 3 clients connected and transmitting data.

I used my routers app to open the port to the wg-easy server.

I attempted to use my phone's cell network to pretend like I am not home, and simply ping my minecraft server. I tried with the wg ip (10.8.0.x) and I tried pinging the normal wlan ip (192.168.x.x). Neither work. I'm really confused as to why this simple test didn't work. The documentation on wireguard's site is pretty sparse when it comes to testing your own setup. Doe anyone have any resource to help me understand how this should work?

Side note: I have to have wireguard installed on every computer in my home network if I want to be able to reach them, correct?

other side note: If I wanted to reach my minecraft webUI (mineOS) from outside my network, what address should I use?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 8 months ago* (last edited 8 months ago) (1 children)

You have WireGuard installed on your Minecraft server? On every computer? That isn't correct.

Once you are successfully connected to the VPN everything should behave like you are physically within your network even if you aren't. You should connect to your Minecraft server like normal.

The WireGuard iOS/Android app has a part where you can see when your last handshake was. If that isn't happening then you aren't connected.

[–] [email protected] 0 points 8 months ago (1 children)

Okay, I thought something seemed a bit odd about what I was doing. So for my use case, I only need to access my home network with my phone, or my laptop. So all I need is a wireguard server on my home network (currently the case, running wg-easy), and the wireguard client on my phone and laptop.

I have that happening right now. And strangely when I am connected to my home wifi I am seeing the "last handshake" information in the wireguard app. But as soon as I turn off wifi and attempt to use my cell network, that line disappears from the app.

Although the frontend webpage for wg-easy still shows my phone connected.

Lets pretend it is connected. You're saying I could simply type "192.168.3.69/login" into my phone's browser, and I would see the mineos login page as if I was on my home's wifi?? Because that would literally be perfect.

[–] [email protected] 0 points 8 months ago (1 children)

If everything is correct... yeah it would. If you are using hostnames to connect home then you will probably need to use the FQDN for it to work.

I was in vacation in Brazil and I would work on my server in the United States during my downtime.

[–] [email protected] 0 points 8 months ago (1 children)

Damn. That sounds perfect. That's exactly how I was hoping it would work. But for some reason my phone won't connect... I wonder how to troubleshoot it.

[–] [email protected] 0 points 8 months ago (1 children)

What happens if you try from another WiFi network? Like Starbucks or the local library?

[–] [email protected] 0 points 8 months ago* (last edited 8 months ago) (1 children)

EDIT: Tried from an external wifi network, same issue. I think it's my port forwarding is broken/wrong. I can't see the port being open from outside. Need to do some troubleshooting on that end. Any advice would be welcome.

I will try that today.

[–] [email protected] 0 points 8 months ago (1 children)

Need to forward the external port to the internal port

[–] [email protected] 0 points 8 months ago

Yeah… I’m not sure there’s anything more I can do. I’ve added the port forwarding rule to my router. As far as I know, there’s not much else to do.