WireGuard client with IPv6 enabled

[ZebMcKayhan]

Morning.

I've tried, as you asked, the prefixlength rule, starting with 63, and continuing with 30, 15, 7, 3, 1 and 0, with the same result. At the moment I launch the command, my Firefox addon tell me that traffic is going through WAN. And this only change if I delete the rule.

Greetings.

Sounds almost like the supress_prefixlength 0 does not do anything at all on your setup.

Ok, one last try.

Put the rule back:

ip -6 rule add from all lookup main suppress_prefixlength 0 prio 10000

Then what do you get from an arbitrary ipv6 route lookup:

ip -6 route get 2600:: from $(nvram get ipv6_rtr_addr) iif br0

And from ip.me:

ip -6 route get 2a02:6ea0:c035::11 from $(nvram get ipv6_rtr_addr) iif br0

Will it say ppoe or wgc1?

Now, remove the rule and try again. Any change?

 

[juanantonio]

Sounds almost like the supress_prefixlength 0 does not do anything at all on your setup.

Ok, one last try.

Put the rule back:

ip -6 rule add from all lookup main suppress_prefixlength 0 prio 10000

Then what do you get from an arbitrary ipv6 route lookup:

ip -6 route get 2600:: from $(nvram get ipv6_rtr_addr) iif br0

And from ip.me:

ip -6 route get 2a02:6ea0:c035::11 from $(nvram get ipv6_rtr_addr) iif br0

Will it say ppoe or wgc1?

Now, remove the rule and try again. Any change?

Okay. First I deleted all my ip -6 rules (I had to add by device and not by prefix, only to get my Google Nest working).

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 rule
0:      from all lookup local
32766:  from all lookup main
juanantonio@RT-AX86U-6C38:/tmp/home/root#

After running wgclient-start, they look like this:

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 rule
0:      from all lookup local
10000:  from all lookup main suppress_prefixlength 0
11210:  from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e lookup wgc1
11210:  from 2a0c:5a80:4806:f600:211:32ff:fea3:fd55 lookup wgc1
11210:  from 2a0c:5a80:4806:f600:f167:7338:e7e7:c230 lookup wgc1
11210:  from 2a0c:5a80:4806:f600:1846:f050:b34c:748 lookup wgc1
11210:  from 2a0c:5a80:4806:f600:8ddb:7e9b:e868:154d lookup wgc1
11210:  from 2a0c:5a80:4806:f600:b08d:d3c8:c33f:4073 lookup wgc1
11240:  from 2a0c:5a80:4601:e00:1::/120 lookup wgc1
32766:  from all lookup main

Here I note that the IPv6 address has not changed (I would note immediatly thanks to my firefox addon).

And then, the output of the commands you asked for:

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2600:: from $(nvram get ipv6_rtr_addr) iif br0

2600:: via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2a02:6ea0:c035::11 from $(nvram get ipv6_rtr_addr) iif br0

2a02:6ea0:c035::11 via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium

juanantonio@RT-AX86U-6C38:/tmp/home/root#

Greetings.

 

[ZebMcKayhan]

After running wgclient-start, they look like this:

Ok, since you changed routing, I need to change the command as well. We need to use a FROM ipv6 that is actually set to use wgc1. I conveniently snapped router br0 ipv6 from nvram but that is not covered by your rules anymore.

So, try these instead (after adding the suppress_prefixlength 0 rule), get route from your first wgc1 ip:

ip -6 route get 2600:: from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e ipv6_ iif br0
ip -6 route get 2a02:6ea0:c035::11 from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0

 

[juanantonio]

Ok, since you changed routing, I need to change the command as well. We need to use a FROM ipv6 that is actually set to use wgc1. I conveniently snapped router br0 ipv6 from nvram but that is not covered by your rules anymore.

So, try these instead (after adding the suppress_prefixlength 0 rule), get route from your first wgc1 ip:

ip -6 route get 2600:: from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e ipv6_ iif br0
ip -6 route get 2a02:6ea0:c035::11 from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0

Ok, here is the output:

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 rule add from all lookup main suppress_prefixlength 0 prio 10000
juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2600:: from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0
2600:: via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium
juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2a02:6ea0:c035::11 from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0
2a02:6ea0:c035::11 via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium
juanantonio@RT-AX86U-6C38:/tmp/home/root#

 

[ZebMcKayhan]

Ok, here is the output:

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 rule add from all lookup main suppress_prefixlength 0 prio 10000
juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2600:: from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0
2600:: via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium
juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2a02:6ea0:c035::11 from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0
2a02:6ea0:c035::11 via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium
juanantonio@RT-AX86U-6C38:/tmp/home/root#

Ok here is where our outputs differs. I have to give up. Either the "suppress_prefixlength 0" rule don't work on your router, or I'm missing something.

Perhaps someone more knowledgeable than me could take a peak and see what I missing? @ColinTaylor , @eibgrad ?
so you don't have to read the entire thread, here is a short recap:
@juanantonio wants to route ipv6 internet data and all is setup from fw side except policy route table wgc1 is only populated with wgc1 routes, nothing else but it should cover all assigned internet addresses. When using "suppress_prefixlength 0" rule to get local routes, all gets internet routes from main table as well. Removing the "suppress_prefixlength 0" rule and it works.
Please find main routing table in #14

juanantonio@RT-AX86U-6C38:/jffs/scripts# ip -6 route show table main
2a0c:5a80:4601:e00:1::1 dev wgs1 proto kernel metric 256 pref medium
2a0c:5a80:4806:f600::/64 dev br0 proto kernel metric 256 pref medium
2a0c:5a80:48ff:ffff::4f75:1225 dev ppp0 proto kernel metric 256 pref medium
fd7d:76ee:e68f:a993::1 dev wgc1 metric 1024 pref medium
fd7d:76ee:e68f:a993:d0c0:1334:273a:628b dev wgc1 proto kernel metric 256 pref medium
fd7d:76ee:e68f:a993:d0c0:1334:273a:628b dev wgc2 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth5 proto kernel metric 256 pref medium
fe80::/64 dev eth6 proto kernel metric 256 pref medium
fe80::/64 dev eth7 proto kernel metric 256 pref medium
fe80::/64 dev br0 proto kernel metric 256 pref medium
fe80::/64 dev bcmsw proto kernel metric 256 pref medium
fe80::/64 dev bcmswlpbk0 proto kernel metric 256 pref medium
fe80::/64 dev dpsta proto kernel metric 256 pref medium
fe80::/64 dev eth1 proto kernel metric 256 pref medium
fe80::/64 dev eth2 proto kernel metric 256 pref medium
fe80::/64 dev eth3 proto kernel metric 256 pref medium
fe80::/64 dev eth4 proto kernel metric 256 pref medium
fe80::/64 dev ifb0 proto kernel metric 256 pref medium
fe80::/64 dev ifb1 proto kernel metric 256 pref medium
fe80::/64 dev imq0 proto kernel metric 256 pref medium
fe80::/64 dev imq1 proto kernel metric 256 pref medium
fe80::/64 dev imq2 proto kernel metric 256 pref medium
fe80::/64 dev ip6_vti0 proto kernel metric 256 pref medium
fe80::/64 dev ip6gre0 proto kernel metric 256 pref medium
fe80::/64 dev ip6tnl0 proto kernel metric 256 pref medium
fe80::/64 dev ip_vti0 proto kernel metric 256 pref medium
fe80::/64 dev sit0 proto kernel metric 256 pref medium
fe80::/64 dev spu_ds_dummy proto kernel metric 256 pref medium
fe80::/64 dev spu_us_dummy proto kernel metric 256 pref medium
fe80::/64 dev wl0.3 proto kernel metric 256 pref medium
fe80::/10 dev ppp0 metric 1 pref medium
fe80::/10 dev ppp0 proto kernel metric 256 pref medium
default via fe80::1 dev ppp0 proto ra metric 1024 expires 1514sec hoplimit 64 pref medium

wgc1 route table in #12

juanantonio@RT-AX86U-6C38:/jffs/scripts# ip -6 route show table wgc1
::/3 dev wgc1 metric 1024 pref medium
2000::/4 dev wgc1 metric 1024 pref medium
3000::/4 dev wgc1 metric 1024 pref medium
fc00::/7 dev wgc1 metric 1024 pref medium

routing rules in #22

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 rule
0:      from all lookup local
10000:  from all lookup main suppress_prefixlength 0
11210:  from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e lookup wgc1
11210:  from 2a0c:5a80:4806:f600:211:32ff:fea3:fd55 lookup wgc1
11210:  from 2a0c:5a80:4806:f600:f167:7338:e7e7:c230 lookup wgc1
11210:  from 2a0c:5a80:4806:f600:1846:f050:b34c:748 lookup wgc1
11210:  from 2a0c:5a80:4806:f600:8ddb:7e9b:e868:154d lookup wgc1
11210:  from 2a0c:5a80:4806:f600:b08d:d3c8:c33f:4073 lookup wgc1
11240:  from 2a0c:5a80:4601:e00:1::/120 lookup wgc1
32766:  from all lookup main

Failing route test in #24

juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 rule add from all lookup main suppress_prefixlength 0 prio 10000
juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2600:: from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0
2600:: via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium
juanantonio@RT-AX86U-6C38:/tmp/home/root# ip -6 route get 2a02:6ea0:c035::11 from 2a0c:5a80:4806:f600:d54f:93c:2f4a:a6e iif br0
2a02:6ea0:c035::11 via fe80::1 dev ppp0 metric 0 hoplimit 64 iif br0 pref medium

How could it be that ip reports internet routes to ppoe due to routing rule that should suppress routes with prefix length 0? Is there some kind of issue with this methode when using ppoe? Or could it be that "suppress_prefixlength 0" rules don't work on AX86U, while it seems to work perfectly fine on my AX86U-Pro? Or is it just something I'm missing?