Wireguard issues on Jio 5G

[SSL]

For the past few days I’m having issues with my self hosted Wireguard server. First handshake goes through but then later keepalive packets are not being answered.

I’ve tried various mtu sizes from 1420, 1360 to all the way down to 1280 but network keeps on dropping. Same issue has been observed with a tailscale exit node.

Is anyone else experiencing this issue?

 

[pothi]

I was bit worried after seeing this thread. So, I checked my self-hosted wireguard server with Jio 5G. Works fine.

I use GitHub - wg-easy/wg-easy: The easiest way to run WireGuard VPN + Web-based Admin UI. . Check for any changes in the self-hosted software. Some changes in the self-hosted software may have caused the issue.

 

[SSL]

@pothi Have you tried keeping the connection on for longer time? How stable is it? Are you in the Mumbai telecom circle?

In my case wg server is a openwrt router, and I can’t get it to stay connected reliably, even local services don’t load properly. It is working fine on Vi’s mobile network, which isn’t IPv6 only like Jio I guess.

 

[pothi]

Didn't check it for long, yet. Just tested for approximately 10 minutes.

I am in Tamilnadu circle.

If wg works well in VI, it is indeed a concern.

My (wireguard) server doesn't have IPv6, btw. And I use the official wireguard client on macOS.

 

[ishanjain28]

I have jio fiber at home. I have ports forwarded on v4. I access it from airtel 5g(v4/v6) and Jio 5g and it all works fine, no problems so far.

 

[SSL]

None of these issues happen if I use wg in split tunnel mode by setting Allowed IPs= 192.168.1.0/24 (local lan subnet).

It only happens if I use full tunnel mode by using 0.0.0.0/0 and ::/0 as Allowed IPs.

@ishanjain28 on JioFiber how are you forwarding ports on v4, isn’t it behind CG-NAT? I have JioFiber too, and I’m using its public IPv6 as an endpoint after disabling v6 firewall in ONT.

 

[ishanjain28]

on JioFiber how are you forwarding ports on v4, is

You can ask them to forward a few ports for you and they'll do it but only if you mention the reason "I need it to access my IP cameras". Send a email to jiofibercare with this text and specify 2-3 ports you want forwarded.

 

[SSL]

You can ask them to forward a few ports for you and they'll do it

Oh okay, I’m not mentally ready to face Jio customer care

Do you use WG in full tunnel mode with Jio 5G?

 

[ishanjain28]

Do you use WG in full tunnel mode with Jio 5G?

I have multiple wg configs on my device. 99% of the time I have the split tunnel config active but sometimes I do use the full tunnel config and it works fine