Hi all, my first question here, so I hope I'll provide the expected details 
! M
My WireGuard setup works perfectly on Android and Windows, but on my Arch machine it stubbornly resolves my endpoint to IPv6 and refuses to connect. Same config file, same server, different behavior. I've tried a bunch of things but nothing sticks, so I'm hoping someone here has dealt with this before or has any idea how to help.
System:
- Client: Arch Linux (CachyOs) with GNOME
- Tried connecting using NetworkManager GUI
- Tried connecting using wg-quick
- Server: OpenWrt router with WireGuard :
- Configuration installed using the following scripts : https://github.com/Coralesoft/openwrt-wireguard-installer
Problem: WireGuard resolves my dynamic DNS endpoint to IPv6, but the connection only works over IPv4.
After using wg-quick up, with my normal config :
❯ sudo wg show
interface: flipflop_opwrt
public key: ********************
private key: (hidden)
listening port: 56821
fwmark: 0xca6c
peer: *****************
endpoint: [2001:*:*:*::*]:51823
allowed ips: 0.0.0.0/0
transfer: 0 B received, 148 B sent
persistent keepalive: every 25 seconds
If I replace my domain name by my current public IPv4, it works as expected and I have a handshake :
sudo wg show
interface: flipflop_opwrt
public key: *******************
private key: (hidden)
listening port: 54401
fwmark: 0xca6c
peer: *********************
endpoint: *.*.*.*:51823
allowed ips: 0.0.0.0/0
latest handshake: 22 seconds ago
transfer: 1.54 KiB received, 22.30 KiB sent
persistent keepalive: every 25 seconds
What works:
- Connection works on Android (auto-resolves to IPv4)
- Connection works on Windows (auto-resolves to IPv4)
- Connection works on Arch if I hardcode my IPv4 address instead of the domain name
What I've tried:
- Deployed config via wg-roadwarrior which apparently should have handled properly the IPv6 configuration.
- Some PreUp / PostDown commands which didn't work.
- Some rules on my laptop to avoid resolving my hostname in IPv6.
What I want to achieve:
- I would prefer to toggle the VPN from GNOME Quick Settings
- I'd like to avoid permanently fixing my IPv4 Public address in my config, as I'm on dynamic DNS)
- I don't want to disable IPv6 globally
Looking for either solution:
- Force domain resolution to IPv4 only for this connection
- Fix my configuration to make IPv6 work properly
Server config (OpenWrt router):
root@OpenWrt:~# uci show network | grep wg
network.wg_admin=interface
network.wg_admin.proto='wireguard'
network.wg_admin.private_key='********************'
network.wg_admin.listen_port='51823'
network.wg_admin.addresses='192.168.20.1/24'
network.wireguard_wg_admin_flipflop=wireguard_wg_admin
network.wireguard_wg_admin_flipflop.description='flipflop'
network.wireguard_wg_admin_flipflop.public_key='******************'
network.wireguard_wg_admin_flipflop.persistent_keepalive='25'
network.wireguard_wg_admin_flipflop.allowed_ips='192.168.20.2/32'
root@OpenWrt:~# wg show wg_admin
interface: wg_admin
public key: *********************
private key: (hidden)
listening port: 51823
peer: *************************
endpoint: *.*.*.*:54401
allowed ips: 192.168.20.2/32
latest handshake: 25 minutes, 56 seconds ago
transfer: 4.59 MiB received, 48.39 MiB sent
persistent keepalive: every 25 seconds
root@OpenWrt:~# uci show firewall | grep -A5 wg
firewall.@zone[3].name='wg_admin'
firewall.@zone[3].input='ACCEPT'
firewall.@zone[3].output='ACCEPT'
firewall.@zone[3].forward='DROP'
firewall.@zone[3].network='wg_admin'
firewall.@zone[3].masq='1'
firewall.@zone[3].masq6='1'
firewall.@forwarding[2]=forwarding
firewall.@forwarding[2].src='wg_admin'
firewall.@forwarding[2].dest='lan'
firewall.@forwarding[3]=forwarding
firewall.@forwarding[3].src='lan'
firewall.@forwarding[3].dest='wg_admin'
firewall.@rule[16]=rule
firewall.@rule[16].name='Allow-WG-wg_admin'
firewall.@rule[16].src='wan'
firewall.@rule[16].proto='udp'
firewall.@rule[16].dest_port='51823'
firewall.@rule[16].target='ACCEPT'
firewall.@forwarding[4]=forwarding
firewall.@forwarding[4].src='wg_admin'
firewall.@forwarding[4].dest='wan'
Current client config :
[Interface]
PrivateKey = *****************
Address = 192.168.20.2/32
DNS = 192.168.20.1
[Peer]
PublicKey = *************
Endpoint = ******.***.com:51823
AllowedIPs = 0.0.0.0/0
PersistentKeepalive = 25
(I'm not understanding how OpenWrt is related to the issue.)