Wireguard with wstunnel (Need help)
reddit / selfhosted

----------------------------------------------------------------------
Mosheung130 · 2023-12-20 03:06

I am very inexperienced.

Hi, I had set up wg-easy [https://github.com/wg-easy/wg-
easy](https://github.com/wg-easy/wg-easy) in a docker container and it
work great by itself. I have also tried putting wstunnel
[https://github.com/erebe/wstunnel](https://github.com/erebe/wstunnel)
on the server (not in docker container but on root) and can run a
simple socks5 proxy of it by itself nicely. Both running at latest
version.

The problem is that I am having difficulty having wg-easy working with
wstunnel.  I had confirm that I have a connection to the server, but
cannot received any packet client side. Is it because I did not turn
on ipv6 port forwarding? I had also found a weird IP trying to connect
to the server wstunnel [https://www.abuseipdb.com/check/159.203.192.47
](https://www.abuseipdb.com/check/159.203.192.47), is that something
to be concern about? How do I check if my server is safe? or am I
tripping?

Any help will be appreciated.

​

**wg-easy setup on server**

docker run -d \\

  \--name=wg-easy \\

  \-e WG\_HOST=server IP \\

  \-e PASSWORD=server password\\

  \-e WG\_PERSISTENT\_KEEPALIVE=25 \\

  \-e WG\_DEVICE=enp1s0 \\

  \-e WG\_DEFAULT\_DNS=[1.1.1.1](https://1.1.1.1) \\

  \-v \~/.wg-easy:/etc/wireguard \\

  \-p 51820:51820/udp \\

  \-p 51821:51821/tcp \\

  \--cap-add=NET\_ADMIN \\

  \--cap-add=SYS\_MODULE \\

  \--sysctl="net.ipv4.conf.all.src\_valid\_mark=1" \\

  \--sysctl="net.ipv4.ip\_forward=1" \\

  \--restart unless-stopped \\

  weejewel/wg-easy

​

**wireguard setup on client**

\[Interface\]

PrivateKey = key

Address = [10.8.0.2/24](https://10.8.0.2/24)

DNS = [1.1.1.1](https://1.1.1.1)

​

\[Peer\]

PublicKey = key

PresharedKey = key

AllowedIPs = [0.0.0.0/0](https://0.0.0.0/0), ::/0

Endpoint = localhost:51820

PersistentKeepalive = 25

​

**wstunnel setup on server**

\[Unit\]

Description = wstunnel is a tunnel tool that's so simple that you say
WOCAO

After = [network.target](https://network.target)

​

\[Service\]

Type=simple

ExecStart = /root/wstunnel server --restrict-to localhost:51820
wss://\[::\]:443

Restart = on-failure

​

\[Install\]

WantedBy = [multi-user.target](https://multi-user.target)

​

**wstunnel setup on client**

./wstunnel client -L 'udp://51280:localhost:51280?timeout\_sec=0'
wss://IP:443

​

​

​

https://preview.redd.it/d5kt3xwk6d7c1.png?width=2400&format=png&auto=w
ebp&s=ced53099890d00af160f712485bb0bd4ee120c77

https://preview.redd.it/smyzrj8s6d7c1.png?width=2035&format=png&auto=w
ebp&s=9eef2167cb1b6014aef14798b1eb0c74ab4ffe32

----------------------------------------------------------------------
[deleted] · 2023-12-20 05:17

[removed]

----------------------------------------------------------------------
Ajb_ftw · 2023-12-20 14:29

Following as I am trying to work through a similar issue with Openvpn