Devices reach the server and nothing beyond it

The server has to forward traffic, and a host firewall can stop it

What you see

  • The handshake works and the server answers a ping.
  • The internet or private servers behind the server do not answer.

Why it happens

The server forwards traffic from the tunnel to the networks in your routes. If forwarding is off in the kernel, or a host firewall drops forwarded traffic, nothing gets past the server.

  1. Check that forwarding is on

    Both should print 1. The installer turns them on in /etc/sysctl.d/99-warpspeed.conf, and the log warns when IPv4 forwarding is off.

    sysctl net.ipv4.ip_forward
    sysctl net.ipv6.conf.all.forwarding
  2. Run the installer again

    It upgrades in place, keeps your settings, writes the forwarding settings, and allows the VPN interface in ufw or firewalld when either is running.

    curl -fsSL https://warpspeedvpn.net/install.sh | sudo bash
  3. Allow the ports on Oracle Cloud

    Oracle's Ubuntu images reject new connections in iptables, so allow the ports there and save the rules.

    sudo iptables -I INPUT 6 -p tcp --dport 80 -j ACCEPT
    sudo iptables -I INPUT 6 -p tcp --dport 443 -j ACCEPT
    sudo iptables -I INPUT 6 -p udp --dport 51820 -j ACCEPT
    sudo netfilter-persistent save
  4. Check private networks from the server

    For a split tunnel, the server itself must reach the private network, for example by being in the same VPC. Ping a private server from the server, and check that its network is in the routes.

Related problems