I'm working on a system where Wireguard machines can connect directly to one another as well as communicate with one another via an intermediary router (or 'server').
When 2 machines directly connect to one another, the allowed-ips setting is obviously a non-issue; what i'm struggling with is if they are unable to communicate directly and build routes to one another via an intermediary router (which is also connected to each 'client' via wireguard). Unless the 'server' NATs the traffic, the allowed-ips setting will prevent the 'clients' from communicating. Am i missing something? I'm trying to avoid building a wg interface for each peer connection if possible, but i'm failing to see any other way around it. Either NAT at the intermediary router or create an interface per-peer. Are there other options?
_______________________________________________ WireGuard mailing list WireGuard@lists.zx2c4.com https://lists.zx2c4.com/mailman/listinfo/wireguard
