1
24.7 Production Series / Help needed with Wireguard Outbound loop
« on: September 16, 2024, 09:50:02 am »
Hey everyone!
I have searched for the problem and tried around for two days now but I can't seem to get rid of a problem, which is why I wanted to ask for help here.
I set up a Wireguard outbound connection to ProtonVPN three days ago following the Wireguard ProtonVPN Road Warrior guide (https://docs.opnsense.org/manual/how-tos/wireguard-client-proton.html).
I got it working and it does as expected.
During setting up something else I had to reboot my OPNsense and after the reboot I did not have connection anymore because the gateway showed as "down". Furthermore in my notfications I can see "loop detected for wg2" (for reference: I have two more inbound connections for remote devices set up, wg0 and wg1).
When I disable the gateway, I get connection again through my WAN gateway. If I let it sit for a while and re-enable the wg-gateway, it works and all my devices are routed out through the tunnel again.
The problem to me seems like that the outbound wireguard connection tries to establish its connection through the wg-gateway upon boot and goes into a loop. If i manually disable the gateway, wireguard connects to proton via the wan gateway and now that the connection stands, i can reenable the wg-gateway and the traffic is routed through.
Now... is there a way to manually delay the start of the wg-outbound gateway upon boot? Or did I set something up incorrectly? Does anyone have an idea how I can get the wg-outbound instance to connect via the wan gateway and not go into a loop? I do want the other instances (inbound, wg0 and wg1) to be routed out through wg2 though, which makes it a bit more complicated I think.
Anyone got any ideas how I can fix this?
Appreciate any help!
I have searched for the problem and tried around for two days now but I can't seem to get rid of a problem, which is why I wanted to ask for help here.
I set up a Wireguard outbound connection to ProtonVPN three days ago following the Wireguard ProtonVPN Road Warrior guide (https://docs.opnsense.org/manual/how-tos/wireguard-client-proton.html).
I got it working and it does as expected.
During setting up something else I had to reboot my OPNsense and after the reboot I did not have connection anymore because the gateway showed as "down". Furthermore in my notfications I can see "loop detected for wg2" (for reference: I have two more inbound connections for remote devices set up, wg0 and wg1).
When I disable the gateway, I get connection again through my WAN gateway. If I let it sit for a while and re-enable the wg-gateway, it works and all my devices are routed out through the tunnel again.
The problem to me seems like that the outbound wireguard connection tries to establish its connection through the wg-gateway upon boot and goes into a loop. If i manually disable the gateway, wireguard connects to proton via the wan gateway and now that the connection stands, i can reenable the wg-gateway and the traffic is routed through.
Now... is there a way to manually delay the start of the wg-outbound gateway upon boot? Or did I set something up incorrectly? Does anyone have an idea how I can get the wg-outbound instance to connect via the wan gateway and not go into a loop? I do want the other instances (inbound, wg0 and wg1) to be routed out through wg2 though, which makes it a bit more complicated I think.
Anyone got any ideas how I can fix this?
Appreciate any help!