I have a GL-AXT1800 where I setup a Wireguard Client via the GliNet App and when doing “Domain Based Routing” it doesn’t seem to be respecting the domains I added. Here are my configs:
Wireguard Client config:
[Interface]
Address = 10.28.199.95
PrivateKey =
DNS = 10.0.0.243
MTU = 1420
Router Config (Version: 4.2.1):
Router IP: 192.168.8.1
Router DNS: 192.168.8.174
VPN Dashboard: I’ve set the “VPN Policy Base On The Target Domain Or IP” to “Use VPN” for the domain “ifconfig.me”
Python script used check public IP address
import requests
def get_ip_info(url):
try:
response = requests.get(url, timeout=3)
return response.text.strip()
except requests.exceptions.Timeout:
return 'Timeout reached'
def redact_ip(ip):
parts = ip.split('.')
if len(parts) == 4:
parts[2] = parts[3] = 'xx'
return '.'.join(parts)
ifconfig_result = get_ip_info('http://ifconfig.me')
ipinfo_result = get_ip_info('http://ipinfo.io/ip')
if '.' in ifconfig_result: # Check if result is an IP, not a timeout message
ifconfig_result = redact_ip(ifconfig_result)
if '.' in ipinfo_result: # Check if result is an IP, not a timeout message
ipinfo_result = redact_ip(ipinfo_result)
print('IFCONFIG:', ifconfig_result)
print('IPINFO:', ipinfo_result)
Results from router (I expected it to get my local ISP address which is 47.182.xx.xx, since it’s not going through Wireguard client):
root@GL-AXT1800:~# ./checkip.py
ifconfig: 154.16.xx.xx
ipinfo: 154.16.xx.xx
Results from machine on LAN (looks like DNS issue as it cant resolve ifconfig?)
user@macbook:~# ./checkip.py
ifconfig: Timeout reached
ipinfo: 45.115.xx.xx
Questions:
Any thoughts on why devices aren’t getting routed through the Wireguard Client?
Why is my Router going through Wireguard VPN network if I have set up Domain Based Routing?
Thanks for your reply @SpitzAX3000. I have a dedicated DNS device running on 192.168.8.174 (PiHole). It doesn’t seem like an issue with the DNS, since on my Macbook since I was able to resolve ipinfo.io but somehow I wasn’t able to resolve ifconfig.me (timeout). Looks like a DNS resolution issue on the AXT1800.
When I connect the wireless clients to the AXT1800 I expect it to route the traffic through the VPN. However it seems like that isn’t working and even more strange is on the router itself all traffic is being routed through the VPN, which is odd since I am setting this up after complete reset of the device.
I believe in order for the AXT modem to correctly perform domain-based policy, it needs to resolve the domains for you. So, please make sure that the Macbook is resolving domains using the AXT as a nameserver.