Velvet Star Monitor

Standout celebrity highlights with iconic style.

news

Wireguard on a DigitalOcean Droplet not allowing ssh, vnc, or smb

Writer Sophia Terry

EDIT 3/15/22: Config info added at the end of this question I had a WireGuard VPN on a Google Cloud VPN but due to networking fees setup a new one on DigitalOcean. For some reason, I cannot SSH, VNC, or use SMB across any of the devices, but my public IP address seems to be working.

Is this a DigitalOcean related issue or any recommendations for troubleshooting?

This is an example of an error I get when trying to SSH into another device that is a peer to the DigitalOcean Ubuntu Droplet:

ssh: connect to host 10.0.0.5 port 22: Operation timed out

wg0.conf on the DigitalOcean server:

[Interface]
Address = 10.0.0.1/24
SaveConfig = true
PostUp = ufw route allow in on wg0 out on eth0
PostUp = iptables -t nat -I POSTROUTING -o eth0 -j MASQUERADE
PostUp = ip6tables -t nat -I POSTROUTING -o eth0 -j MASQUERADE
PreDown = ufw route delete allow in on wg0 out on eth0
PreDown = iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
PreDown = ip6tables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
ListenPort = 51820
PrivateKey = eHXOyd8**REMOVED FOR SECURITY**xMO9mlc=
[Peer]
PublicKey = wk6iHe+FiJhIV+wLxeCVLyWdT/WV8xrLmeHI39m5v2o=
AllowedIPs = 10.0.0.2/32
Endpoint = 104.228.167.16:51820
[Peer]
PublicKey = /OEck40Kjc15a3JzePkf9wmlMw+Sdzgaauhfzt/3LkM=
AllowedIPs = 10.0.0.3/32
Endpoint = 104.228.167.16:55239
[Peer]
PublicKey = CgHsJnocl8CkpD0c4rqFPmOBbpNB8Wpx0hy6J0YhBj0=
AllowedIPs = 10.0.0.4/32
Endpoint = 104.228.167.16:59555
[Peer]
PublicKey = wxW/6x/M8msXWqahcAR7OjpZbXsZta18qMHGMvbKaRg=
AllowedIPs = 10.0.0.5/32
Endpoint = 104.228.167.16:52628
PersistentKeepalive = 25

Result of running sudo ufw status:

root@wireguard:~# sudo ufw status
Status: active
To Action From
-- ------ ----
51820/udp ALLOW Anywhere
OpenSSH ALLOW Anywhere
51820/udp (v6) ALLOW Anywhere (v6)
OpenSSH (v6) ALLOW Anywhere (v6)
Anywhere on eth0 ALLOW FWD Anywhere on wg0
Anywhere (v6) on eth0 ALLOW FWD Anywhere (v6) on wg0

My iMac Config (trying to SSH, VNC, and SMB into the raspberry pi):Screenshot of the App Dashboard

And Raspberry Pi (network server) wg0.conf file:

[Interface]
PrivateKey = 0B26+xT9D4ZxOD23IeOPvh7gApOL5ES5NdXES/l7Lkk=
Address = 10.0.0.5
[Peer]
PublicKey = uj4QIUv4k40HK0nCGAtPKx8BYLUtWK8cTvLGOADkzx4=
AllowedIPs = 0.0.0.0/0
Endpoint = 142.93.113.242:51820
PersistentKeepalive = 25

And a screenshot of my DigitalOcean Dashboard:DigitalOcean VM Dashboard

6

1 Answer

Thanks to a user in the comments, allowing the firewall to route traffic through the VPN interface fixed the issue.

0

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password

Post as a guest

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy