WireGuard bricks internet after activating tunnel

ajawad

On GrapheneOS, whenever I install the WireGuard APK from Wireguard's website and activate a tunnel, the tunnel works fine. I am able to access everything that the tunnel allows, however it completely bricks LAN access (i am unable to communicate with other devices on my local network) aswell as internet access. Same exact thing happens with other Wireguard clients. I still have DNS, and IP, and a gateway, latest version of graphene on a pixel 8.

Eirikr70

ajawad The other side of your tunnel has no internet access. So activating the tunnel isolates you from the internet. You have to solve the problem server-side.

alfred

ajawad
For the Internet access, you may want to double check the Allowed IPs section in the config. Usually, you would put 0.0.0.0/0 to route all traffic over the VPN, if you hit the "Exclude private IPs" option, it will modify the Allowed IPs so all traffic except for local IP traffic gets routed over the VPN.

For LAN access, you need two things:

Ensure that the Private IP ranges are not in the Allowed IPs.
Disable the "Block connections without VPN" setting (Settings > Network and internet > VPN > VPN Settings).

ignatius

ajawad

ajawad Probably a config issue, my wireguard tunnels all work perfectly fine.

Dumdum

ajawad
Settings > Network and internet > VPN > cog icon to the right of your VPN > Block connections without VPN

This is on by default. Turn it off if you want to use local network. This removes leak protections though.