Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DietPi-Software | WireGuard fixes + OpenVPN/WiFi Hotspot enhancements #2526

Merged
merged 6 commits into from
Feb 12, 2019
Merged

Conversation

MichaIng
Copy link
Owner

@MichaIng MichaIng commented Feb 9, 2019

Status: Testing

  • Changelog

References:

Commit list/description:

  • DietPi-Software | WireGuard: Switch from 10.8.0.0 to 10.9.0.0 IP addresses, to avoid double use with OpenVPN
    • There seem to be anyway some incompatibilities when using both VPNs in parallel and also it simply does not make sense besides for testing. However it does not hurt to use another subnet and at least solves the very firth compatibility issue.
  • DietPi-Software | WireGuard: Replace 127.0.0.1/localhost loopback DNS entries in client config by VPN server IP 10.9.0.1
  • DietPi-Software | OpenVPN: Use drop-in /etc/sysctl.d/dietpi-openvpn.conf to apply IP forwarding; Add IPv6 forwarding as well; Use sysctl command to apply settings now
    • This is since there are some reports about /etc/sysctl.conf not being parsed on boot due to missing /etc/sysctl.d/99-sysctl.conf symlink. /etc/sysctl.conf is not parsed explicitly, so it's actually deprecated and should not be used. As well this matches our effort to use drop-in configs where possible, which allows easy removal/revert and clear identification that it's from us and for which software title.
  • DietPi-Software | WiFi Hotspot: Use drop-in /etc/sysctl.d/dietpi-wifihotspot.conf to apply IP forwarding; Add IPv6 forwarding as well; Use sysctl command to apply settings now
  • CHANGELOG | WireGuard: Switched from 10.8.0.0 to 10.9.0.0 IP addresses on fresh installs
  • CHANGELOG | WireGuard: Resolved an issue with wrong client DNS entry, if on server 127.0.0.1/localhost loopback DNS entry is used
  • DietPi-Software | WireGuard: Add multiple clients as own [Peer] entries, so allow concurrent connections

+ DietPi-Software | WireGuard: Switch from 10.8.0.0 to 10.9.0.0 IP addresses, to avoid double use with OpenVPN
+ DietPi-Software | WireGuard: Replace 127.0.0.1/localhost loopback DNS entries in client config by VPN server IP 10.9.0.1
+ DietPi-Software | OpenVPN: Use drop-in /etc/sysctl.d/dietpi-openvpn.conf to apply IP forwarding; Add IPv6 forwarding as well; Use sysctl command to apply settings now
+ DietPi-Software | WiFi Hotspot: Use drop-in /etc/sysctl.d/dietpi-wifihotspot.conf to apply IP forwarding; Add IPv6 forwarding as well; Use sysctl command to apply settings now
+ CHANGELOG | WireGuard: Switched from 10.8.0.0 to 10.9.0.0 IP addresses on fresh installs
+ CHANGELOG | WireGuard: Resolved an issue with wrong client DNS entry, if on server 127.0.0.1/localhost loopback DNS entry is used
+ DietPi-Software | WireGuard: Add multiple clients as own [Peer] entries, so allow concurrent connections
@Fourdee
Copy link
Collaborator

Fourdee commented Feb 12, 2019

@MichaIng

Many thanks, looking good, will merge 👍

@Fourdee Fourdee merged commit 5f1a2ab into dev Feb 12, 2019
@MichaIng MichaIng deleted the vpn branch February 12, 2019 18:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants