GL-MT6000 Wireguard Blackholing Traffic

Routers
1

yeah.. the title is a bit confusing.

What I'm running into is I have a webserver behind a NGINX proxy within my network and If I'm on my WireGuard VPN it'll redirect me to the GL.iNet Admin page instead of forwarding the traffic to my internal NGINX server.

Being on LAN it works fine, and on WAN it works fine.

What I suspect is the traffic isn't being allowed to go from Outside > Inside if it's destined from the WG interface, or is hitting a blanket rule somewhere.

I verified it not being an issue on Vanilla OpenWRT, but can't deal with the performance of the open-source wireless drivers.

2

Yep, this title is a bit confusing.

MT6000 as the VPN server, a server running nginx on the MT6000 LAN, and the WG client on other router or phones, is the topology correctly?

The WG client access the server website via the LAN IP, and it will re-direct to the GL Admin Panel page?

4

Hi Bruce,

MT6000 as my firewall, VPN server and router.
Clients are connecting to MT6000 as the client.
Nginx lives on a server on my LAN.

5

Thanks, it is clear.

image
image799×204 13.9 KB

Is access the web page (nginx) in VPN client through domain-name or the LAN IP?
The Nginx is running a Web service, right?

6

the diagram is correct :slight_smile:

nginx is being used as a reverse-proxy, and I access it using the public DNS name.

7

May I know how about if access it using the LAN IP?
Since you already running the VPN, why using the domain_name (public DNS name) instead of the LAN IP?