general
- s
straight-lock-3524
08/21/2021, 12:13 AMnow to answer your question from hours ago, yes it works by just adding your for example lan range to allowed ip's 🙂 - s
straight-lock-3524
08/21/2021, 12:13 AMjust tried it - s
straight-lock-3524
08/21/2021, 12:16 AM@User if you download the latest netclient it works fine now 🙂 - s
straight-lock-3524
08/21/2021, 12:28 AMwhat would be the most easiest in enabling hole punching again? enable it on the network and do a checkin? - e
enough-machine-51260
08/21/2021, 12:30 AMI did this on the same and different machines, but never had CPU issue, netmaker on a VM with ubuntu. - b
bumpy-accountant-60013
08/21/2021, 2:48 AMI did a new deploy for my workmates last night and thought I was losing my mind - b
bumpy-accountant-60013
08/21/2021, 2:52 AMalso haven't had any probs with ingress & egress on the same machine and cpu thus far - s
strong-father-52987
08/21/2021, 10:09 AMOk so after everything, it finally works! Thank you so much for all the support! - s
strong-father-52987
08/21/2021, 10:10 AMSpeed test on fast.com: Outline -> ~20mb/s Netmaker/wg -> ~85mb/s - s
strong-father-52987
08/21/2021, 10:13 AMIn terms of config I have now a single server as ingress and egress gateway and have changed my external client configuration with AllowedIPs=0.0.0.0/0, DNS=1.1.1.1 - j
jolly-london-20127
08/21/2021, 1:06 PM@strong-father-52987 great! - j
jolly-london-20127
08/21/2021, 1:07 PMI'd like to automate this, and maybe even have a "vpn gateway mode" for installing the server, where the server is an egress/ingress gateway by default with 0.0.0.0/0. Even though it's not a primary use case, that would be pretty easy to set up. - j
jolly-london-20127
08/21/2021, 1:08 PM@User did you ever figure out your issue with the peer hanging in hetzner? it would be really good to know what the fix is - s
strong-father-52987
08/21/2021, 1:09 PMNope, didn't happen again - j
jolly-london-20127
08/21/2021, 1:09 PMvery strange... - j
jolly-london-20127
08/21/2021, 1:10 PMso...maybe the ingress gateway fix...fixed it? - j
jolly-london-20127
08/21/2021, 1:10 PMeven though it wasnt an ingress gateway.. - j
jolly-london-20127
08/21/2021, 1:10 PM(for part of your test) - s
strong-father-52987
08/21/2021, 1:10 PMI still will keep server and gateway separate for not risking hanging the server - s
strong-father-52987
08/21/2021, 1:20 PMIf I have another peer using netclient, it doesn't route traffic by default through the gateway. I guess it's because of the AllowedIPs containing only the private network. So for this use case even for clients that can run netclient it's easier to use external client, override the config and use wg-quick up and down. - s
strong-father-52987
08/21/2021, 1:21 PMSo maybe that's something you can support, routing all traffic through the tunnel and enabling/disabling connection without leaving network. - j
jolly-london-20127
08/21/2021, 1:22 PMthe allowed ips of peers should add the egress gateway range.... - j
jolly-london-20127
08/21/2021, 1:22 PMif it's not, that's another bug - s
strong-father-52987
08/21/2021, 1:24 PMAh then it's a bug - s
strong-father-52987
08/21/2021, 1:25 PMAny reason for not adding the egress gateway also to the external clients configuration? - j
jolly-london-20127
08/21/2021, 1:27 PMTBH I just didn't do any testing to see if it would work. But apparently it does 😶 - j
jolly-london-20127
08/21/2021, 1:27 PMThere's other surprising things about netclients I didn't think would work too - j
jolly-london-20127
08/21/2021, 1:27 PMLike, I think you can actually reach back to any netclient from any peer - j
jolly-london-20127
08/21/2021, 1:28 PMso it is sort of like a "full mesh" - s
strong-father-52987
08/21/2021, 1:34 PMI officially love this, even though I have no experience in setting up vpns and in the past week I got this and outline to work, netmaker model seems very elegant and therefor easy to understand.