[Is WireGuard broken on Armbian?]

Hello!

 

I'm investigating a similar issue and found this thread. I'm trying to run wireguard on my banana pi pro. 

I have the following setup (as simple as possible for debugging the problem, left in the keys on purpose):

Quote

#Banana pi running armbian on 192.168.0.11

[Interface]
Address = 10.200.200.1/24
SaveConfig = true
ListenPort = 51822
PrivateKey = qAQNv75Hbfa6Spoe6lx0Y71h509ftMmqcnWhf2EDY2U=

[Peer]
PublicKey = Z2fGG/610nuIg58X0MGBXTwGR9bgqdvjQsUvfqrPhic=
AllowedIPs = 10.200.200.2/32
#Endpoint = 192.168.0.101:51822
 

#My notebook running Ununtu on 192.168.0.101

[Interface]
Address = 10.200.200.2/24
PrivateKey = YJOifAYRt0WojFAFvideTCVSr5OE4PtQCxMri0s4mHY=
ListenPort = 51822

[Peer]
PublicKey = tAotXUDO1HLLjDN1Ovq3R16DG/JgmNN71YvfBrPYFFQ=
Endpoint = 192.168.0.11:15822
AllowedIPs = 10.200.200.0/24
 

 

 

I found that bpi is having problem accepting connections, I can see the packets received in tcpdump but there is no wg handshake.

If I uncomment the Endpoint line in BPI config wireguard can establish connection with my desktop, even if I remove the endpoint address from my notebooks configuration.

 

The situation is same with 4.19.62-sunxi #5.92,  5.4.28-sunxi #20.02.7 and 5.5.13-sunxi #trunk.088.

 

Quotemodinfo wireguard
filename:       /lib/modules/5.5.13-sunxi/kernel/drivers/net/wireguard/wireguard.ko
alias:          net-pf-16-proto-16-family-wireguard
alias:          rtnl-link-wireguard
version:        1.0.0
author:         Jason A. Donenfeld <Jason@zx2c4.com>
description:    WireGuard secure network tunnel
license:        GPL v2
srcversion:     00F219E9700C1A81A851666
depends:        libcurve25519,libblake2s,udp_tunnel,libchacha20poly1305,curve25519-neon,ip6_udp_tunnel
intree:         Y
name:           wireguard
vermagic:       5.5.13-sunxi SMP mod_unload ARMv7 thumb2 p2v8 

 

I didn't find any related error message in the logs.

 

Please let me know if you have some idea debugging this issue.

 

Thanks,
Peter