Wireguard not routing traffic from client to other servers on the network
After so many try and fail and brainstorming with wireguard IRC chanel guys, apparently I forgot to add a static route for 10.7.0.0/24 for each server behind wireguard. Ping goes to the server, but does not return as server does not know where to send that echo-reply:
ip route add 10.7.0.0/24 via 220.127.116.11 dev eth0 (main device for communication)
For me, problem solved ;-)
I ran into the same problem - my server aka "Wireguard SRV" in rhe diagram (=Centos8, with iptables and ferm) doesn't route traffic.
The problem: I forgot to
sysctl -w net.ipv4.ip_forward=1.
But that was not the only issue -
ip route add ... was not the solution.
So I added these lines to my wireguard-config (located at
/etc/wireguard/wg0.conf according to your addresses):
[Interface] // ... PreUp = iptables -A POSTROUTING -s 10.7.0.0/24 -o eth0 -j SNAT --to-source 18.104.22.168 -t nat PreDown = iptables -D POSTROUTING -s 10.7.0.0/24 -o eth0 -j SNAT --to-source 22.214.171.124 -t nat