DNS-Server option on a Wireguard instance

« previous next »

Print

Pages: [1]

Author Topic: DNS-Server option on a Wireguard instance (Read 911 times)

thisisme

Newbie
Posts: 3
Karma: 0

DNS-Server option on a Wireguard instance

« on: June 06, 2024, 06:09:47 am »

Hey

What does the DNS-Server option on a Wireguard instance configuration do? I know what it does when set on the client, but what happens exactly when I set it on the opnsense?

Logged

hushcoden

Hero Member
Posts: 550
Karma: 23

Re: DNS-Server option on a Wireguard instance

« Reply #1 on: June 12, 2024, 09:42:48 am »

Indeed, it would be helpful if someone would shed some light on this.

Logged

Bob.Dig

Sr. Member
Posts: 259
Karma: 13

Re: DNS-Server option on a Wireguard instance

« Reply #2 on: June 12, 2024, 10:07:46 am »

If it is about the Peer generator, it is for a peer-config.

Logged

tiermutter

Hero Member
Posts: 1099
Karma: 61

Re: DNS-Server option on a Wireguard instance

« Reply #3 on: June 12, 2024, 10:40:46 am »

I thought this is kinda push option for DNS and tried it, but it seems to have no function (Client is using it's default DNS when tunnel is up with no DNS set in client config).

I believe this option was once intended to be used for such but never finished. Also manpages and several docs won't refer to this option as if it doesn't exist.

Logged

i am not an expert... just trying to help...

franco

Administrator
Hero Member
Posts: 17668
Karma: 1611

Re: DNS-Server option on a Wireguard instance

« Reply #4 on: June 12, 2024, 02:05:42 pm »

It sets the DNS server locally. It's pretty obscure wg-quick shorthand and very often breaks your router's ability to resolve names.

https://www.reddit.com/r/WireGuard/comments/11edvs2/wgquick_and_dns/

It's only really useful for single client use where you want to route all over the tunnel (like a branch office).

Cheers,
Franci

Logged

Print

Pages: [1]

« previous next »