Bridge interfaces?

Jason A. Donenfeld Jason at zx2c4.com
Sun Sep 24 00:44:48 CEST 2017


Hi,

Yes indeed this is possible. Enable ip forwarding (sysctl -w
net.ipv4.ip_forwarding=1), and then make sure you have the correct
routes set. You may have to add a few entries to your allowed-ips to
ensure that the network is okay with wireguard, or, perhaps easier,
would to just enable MASQUERADEing (iptables -t nat -A POSTROUTING -s
10.8.8.0/24 -o tinc0 -j MASQUERADE, where 10.8.8.0/24 is the wireguard
network.)

There are a lot of ways to skin the cat, and I suspect if you write
back with details of network segments and whatnot, there might be
others who might have their own useful opinions. Alternatively, you
can always ask in #wireguard on Freenode.

Jason


More information about the WireGuard mailing list