Bridging wg and normal interfaces?

[Rafał Grasman]

Hello,

I would like to bridge my LAN and WireGuard interfaces so I can make a
site-to-site VPN with the gateway/router being at the other site.

But when using brctl to add wg0 to a bridge, the operation is not supported.

This is the setup I am aiming for:

Isolated VM virteth0 - preferably dhcp 172.16.0.2/24 from remote site
(gateway 172.16.0.1/24)

Switch VM - wg0 with 172.16.0.254/24 and eth0 with 192.168.1.254/24 (for
internet access through gw 192.168.1.1/24) and virteth0 (manual, no ip, no
dhcp), I want to bridge virteth0 and wg0.

Remote machine with wg0 172.16.0.1/24 and a public ip on eth0 (e.g.
11.22.33.44/32)

both virteth0's are connected together on the host machine.

Is this somehow possible with wireguard? As for now the Switch VM isn't a
switch, it acts as a router which does work but is not something I want
(and forces me to have a different ip on virteth0 on SwitchVM than wg0 has,
this forces me to make everything look like it came from SwitchVM instead
of the real addresses, because both the remote machine and Switch VM have
to act as routers, I want only 1 router in this setup - the remote machine).

Thanks in advance for your time and help :)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zx2c4.com/pipermail/wireguard/attachments/20180125/3a927c4d/attachment.html>