Khắc phục lỗi WireGuard VPN (wg-easy) không hoạt động trên Oracle Cloud VPS

1
# Note: Do not edit this file directly.
2
# Your changes will be overwritten!
3

4
# Server
5
[Interface]
6
PrivateKey = GC3uPUZkrEVtvxxxxxxxkw+//UNQCpqTMO3sTVSkE0=
7
Address = 10.8.0.1/24
8
ListenPort = 51820
9
PreUp =
10
PostUp =  iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE; iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT;
11
PreDown =
12
PostDown =

1
docker exec wg-easy ip r | grep default | cut -d ' ' -f 5 | head -n1

1
eth1

1
version: "3.8"
2
services:
3
  wg-easy:
4
    environment:
5
      # ⚠️ Required:
6
      # Change this to your host's public address
7
      - WG_HOST=111.111.111.111
8
      - WG_DEVICE=eth+
9
      #- WG_PATH='./'
10
      # Optional:
11
      # - PASSWORD=10h30
12
      # - WG_PORT=51820
13
      # - WG_DEFAULT_ADDRESS=10.8.0.x
14
      # - WG_DEFAULT_DNS=1.1.1.1
15
      # - WG_MTU=1420
16
      # - WG_ALLOWED_IPS=192.168.15.0/24, 10.0.1.0/24
17
      # - WG_PRE_UP=echo "Pre Up" > /etc/wireguard/pre-up.txt
18
      # - WG_POST_UP=echo "Post Up" > /etc/wireguard/post-up.txt
19
      # - WG_PRE_DOWN=echo "Pre Down" > /etc/wireguard/pre-down.txt
20
      # - WG_POST_DOWN=echo "Post Down" > /etc/wireguard/post-down.txt
21
    image: ghcr.io/wg-easy/wg-easy:13
22
    container_name: wg-easy
23
    volumes:
24
      - .:/etc/wireguard
25
    ports:
26
      - "51820:51820/udp"
27
      - "51824:51821/tcp"
28
    restart: unless-stopped
29
    cap_add:
30
      - NET_ADMIN
31
      - SYS_MODULE
32
    sysctls:
33
      - net.ipv4.ip_forward=1
34
      - net.ipv4.conf.all.src_valid_mark=1

1
# Note: Do not edit this file directly.
2
# Your changes will be overwritten!
3

4
# Server
5
[Interface]
6
PrivateKey = GC3uPUZkrEVtvxxxxxxxkw+//UNQCpqTMO3sTVSkE0=
7
Address = 10.8.0.1/24
8
ListenPort = 51820
9
PreUp =
10
PostUp =  iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth+ -j MASQUERADE; iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT;
11
PreDown =
12
PostDown =