Hi all,
I'm using wireguard on android, and it works just fine.
The wg endpoint also has it's own dns server, which I too configured on
the wg droid app, so I can reach my network boxes with their internal
domain names.
I also enabled "Always-on VPN" and "Block connections without VPN" on
the phone's system settings, so everything goes through the wg
interface. When it's not up nothing gets in or out - just as desired.
Unfortunately I have to live with a changing ip on the server/endpoint.
Which is why I use a dyndns hostname as wg endpoint.
Now, if I set "Private DNS" on the droid's system settings to a specific
*public* server ("Private DNS provider hostname"), it even works if the
ip of my wg server changes! Meaning the wg vpn setup automagically picks
up the new ip. (How, btw? Is that an android feature or implemented on
the wg app?).
But using a public server there obviously breaks reaching my internal
boxes using their domain names, since those are only provided by my own
dns server. And for that, I have to set "Private DNS" to "Automatic".
But that in return breaks the wg setup if my endpoint's ip changes, I
have to manually dis/reenable the wg interface then. The workflow/around
then becomes:
- set "Private DNS" to "Automatic"
- disable wg interface
- enable wg interface
- set "Private DNS" to "Private DNS provider hostname"
Which gets really annoying as you can imagine.
Is there a solution to this? I guess if the wg app would use a specific
dns server to just resolve the endpoint's hostname it should work? Is
that possible?
Thanks,
Andre
