Re: Endpoint address dns resolution - option to prefer IPv6 or IPv4

2020-03-14 Thread Luis Ressel
On Fri, Mar 13, 2020 at 03:52:19PM +0100, Torsten Krah wrote: > I've got an endpoint with a DNS name which has both, an A and > record. > I would like to configure the client, so that I can tell him, to either > prefer IPv6 or IPv4 for the vpn connection. The relevant source code can be

Re: Endpoint address dns resolution - option to prefer IPv6 or IPv4

2020-03-14 Thread Matthias Urlichs
On 14.03.20 17:52, Luis Ressel wrote: > A standards-compliant implementation should return an ipv6 address in > the first position if one is available and the host has a working > connection to the v6 internet. Unfortunately that is necessary but not sufficient for the link to actually succeed.

WireGuard connecting hosts WAN->LAN

2020-03-14 Thread Germano Massullo
A simple question to Wireguard developers, since while asking for help in OpenWRT forum[1] I have been told that I am asking a thing that Wireguard cannot do, so I want to ask upstream if it is possible or not Scenario: A = internet (WAN) host (WireGuard IP 10.1.1.3) B = OpenWRT router (WireGuard

Re: WireGuard connecting hosts WAN->LAN

2020-03-14 Thread Luis Ressel
On Sat, Mar 14, 2020 at 04:33:44PM +0100, Germano Massullo wrote: > I want to: > 1) connect A to C passing through B. I don't want to expose C to > internet at all, (so no things like port forwarding) > 2) A must have C public key (and viceversa), so in case of B being > compromised, the A<->C VPN

Re: Endpoint address dns resolution - option to prefer IPv6 or IPv4

2020-03-14 Thread Luis Ressel
On Sat, Mar 14, 2020 at 06:08:35PM +0100, Matthias Urlichs wrote: > Ideally some background process forked by `wg` or `wg-quick` should set > the first address, monitor the peer, and use the next one if it hasn't > been established after some configurable number of seconds (or when the > keepalive

Re: WireGuard connecting hosts WAN->LAN

2020-03-14 Thread Germano Massullo
Il 14/03/20 19:16, Luis Ressel ha scritto: > On Sat, Mar 14, 2020 at 04:33:44PM +0100, Germano Massullo wrote: >> I want to: >> 1) connect A to C passing through B. I don't want to expose C to >> internet at all, (so no things like port forwarding) >> 2) A must have C public key (and viceversa),