Skip to main content Multicast routing through WireGuard : r/WireGuard
Go to WireGuard
•

Multicast routing through WireGuard

I'm trying to access some bonjour-based services remotely over WireGuard on iOS, like Apple Home Kit.

A quick inspection on Wireshark revealed that it is based on multicast packets with destination IP 224.0.0.251.

I've setup smcroute with the following configuration on the WireGuard host:

mroute from eth0 group 224.0.0.251 to wg0

mroute from wg0 group 224.0.0.251 to eth0

However when performing a multicast ping with ping -I eth0 -t 20 224.0.0.251 and attaching tcpdump on the wg0 interface I don't see any multicast packet flowing through.

Is WireGuard capable of sending multicast packets right now? Or have I just misconfigured something?

Apple Card is a no-fee credit card that gives you up to 3% unlimited Daily Cash back on all of your purchases. Apply now and use right away. Terms apply.
Thumbnail image: Apple Card is a no-fee credit card that gives you up to 3% unlimited Daily Cash back on all of your purchases. Apply now and use right away. Terms apply.
Sort by:
Best
Open comment sort options

Have you got one peer only? Then I guess it could work, but I don't see how multicast could work with more peers since one IP address can't be associated with more than one peer.

To analyze traffic on a remote host where you have SSH access (your router) you can use this:

ssh root@HOST tcpdump -U -s0 -w - 'not port 22' | wireshark -k -i -

Which basically executes tcpdump on the remote machine filtering out port 22 (the SSH connection itself) and pipes the captured data to stoout and to your local wireshark instance.

I’ve actually got many peers, but I’m interested in forwarding multicast packets only to one peer, should I add the multicast address to its allowed IPs right?

should I add the multicast address to its allowed IPs right?

Yes.

More replies
More replies

How would this be done on ubuntu server?

Actually I never managed to make this fully work on Arch Linux ARM 😔

damn that sucks, i tired it and it worked for a split second then it stopped and i dunno why.

More replies
More replies