From ae0bebd28efa588a3f2a8471b9ae4020679e039e Mon Sep 17 00:00:00 2001 From: Xiao Pan Date: Fri, 1 Dec 2023 02:51:17 +0000 Subject: sysctl need net.ipv4.ip_forward=1 for wireguard masquerade? to work --- etc/sysctl.d/99-sysctl.conf | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 etc/sysctl.d/99-sysctl.conf (limited to 'etc/sysctl.d') diff --git a/etc/sysctl.d/99-sysctl.conf b/etc/sysctl.d/99-sysctl.conf new file mode 100644 index 00000000..0f8abbfd --- /dev/null +++ b/etc/sysctl.d/99-sysctl.conf @@ -0,0 +1,6 @@ +# at least `net.ipv4.ip_forward = 1` is needed for wireguard masquerade? to work +# ka seems has this as default, maybe arch linux cloud-init image has this as default? +# https://forums.rockylinux.org/t/wireguard-masquerade-wont-work/7752 +# https://wiki.archlinux.org/title/Nftables#NAT_with_port_forwarding +net.ipv4.ip_forward = 1 +net.ipv6.conf.all.forwarding = 1 -- cgit v1.2.3-70-g09d2