Make Wireguard connection global

Sh1ft

Hello everyone,
I habe installed grapheneos for the first time die to a lack of a pixel phone. I am pretty amazed by this Rom and I plan to use it in future.

But there is one problem i am dealing with. I usr wireguard VPN to connect to my Server at home where I have a pihole running. Now I use different profiles and as long as one profile is connected to the VPN the other ones wont connect. It seems normal to me that Android will only connect to one VPN at a time.

Is there a solution to make the VPN connection global for every profile?

MetropleX

Would it not be a better idea to contain all the apps requiring that VPN connection into one profile of their own?

Sh1ft

MetropleX Yes that would be a solution but it doesnt fit. I need the VPN on at least two profiles.

andonl

Sh1ft
You should create wireguard vpn for each profile using different parameters like keys and IP addresses. From server side too as separate vpn connections.

Sh1ft

On client side i already did that, but when I try to make the second vpn connection the gives back an error: "wgTurnOn -1" So it seems like the app cant even start to connect because VPN is already in use in the other profile.

andonl

Sh1ft
I have enabled on both(owner & one user profile) vpn connections 'always on' and 'block connections not using vpn'. DNS server is configured also on both.
No problem.

Sh1ft

andonl OK, I will check. Thank you!

But do you use wireguard?

andonl

Sh1ft
Yes, mentioned earlier.

Sh1ft

andonl I cant figure out whats wrong. I did everything you recommended already before I wrote my first post. Both Clients connect to the Server interface and are configured individually with different IP and key. Both profiles can connect to the Server but only one oft them. As soon as I try to connect the second the error occurs (wgTurnOn returned -1) Searching for the error brought no answers.

MetropleX

Sh1ft try this:

I found the issue just now, on the interface section do not put the anything in the listen port. The only place the listen port should be in is the endpoint after the colon.

From: https://www.reddit.com/r/WireGuard/comments/oru6hf/error_bringing_up_tunnel_on_android_phone/

Sh1ft

MetropleX That really did the trick. Thank you so much! I found that reddit post before but did not enrole the last answer somehow. Thank you!