apologies if this DNS conditional forwarding query is a daft question

Simon McNair simonmcnair at gmail.com
Mon Jan 24 09:59:55 UTC 2022


Hi,
Again apologies if this is networking newb question
I have just spent the weekend laboriously learning about wireguard 
windows and finally powershell & internet connection sharing. My usage 
case is supporting a parents network and/or sharing resources in a small 
site(s) to site(s) network.
My question is this.  Without buying any extra commodity hardware, or 
installing any more software is it possible to set up conditional DNS 
forwarding per peer for DNS ?  I would like each subnets DNS server (in 
this case isp router) to handle DNS for that subnet.

i.e. if the dns request is for a subnet on peer A use DNS server 
192.168.100.254 defined in peer A config
        if the dns request is made a subnet on peer B use DNS server 
192.168.110.254 defined in peer B config

Similar to this:
[Interface]
PrivateKey = pkhere
ListenPort = 12345
Address = 10.250.250.4/24

[PeerA]
PublicKey = peerpkhere
AllowedIPs = 192.168.100.0/24, 10.250.250.0/24
Endpoint = my.ddnsalias.net:5678
DNS = 192.168.100.254

[PeerB]
PublicKey = peerpkhere
AllowedIPs = 192.168.110.0/24, 10.250.250.0/24
Endpoint = my.ddnsalias.net:5678
DNS = 192.168.110.254

I know we already have the Interface level DNS option but that would 
fail for peers unless conditional forwarding was configured which isn't 
possible on most home routers.  I know I can fix this with dnsmasq or a 
pihole but that requires another machine on all the time.  I was just 
wondering if anything clever could easily be done within wireguard.  I 
know it's a big ask but it would be appreciated as an enhancement request.

Likewise, for the windows version of wireguard it would be cool if there 
was an option to enable internet connection sharing on the client.  I 
have done this successfully (I am happy to share the steps if required) 
although it was a huge pita and required dangerousscripts enabling which 
I'm not keen on.
Thanks again for all the hard work Jason, I love the app, and it is 
running happily on my ER-X and making my life better.

Regards
Simon



More information about the WireGuard mailing list