Après installation, j’ai mis ce fichier /etc/wireguard/nut2lookout.conf sur Nut :
[Interface]
Address = 10.255.255.1
Address = 2001:bc8:3335:ff00::1
PrivateKey = <clef privée Nut>
ListenPort = 11000
Postup = /bin/systemctl restart dnsmasq
[Peer]
PublicKey = <clef publique Lookout>
Endpoint = 2a01:e0a:12c:3940:::11000
AllowedIPs = 10.255.255.2/32
AllowedIPs = 2001:bc8:3335:ff00::2/128
AllowedIPs = 10.255.1.0/24
AllowedIPs = 2a01:e0a:12c:3941::/64
AllowedIPs = 10.255.2.0/24
AllowedIPs = 2a01:e0a:12c:3942::/64
et ce fichier /etc/wireguard/lookout2nut.conf sur Lookout :
[Interface]
Address = 10.255.255.2
Address = 2001:bc8:3335:ff00::2
PrivateKey = <clef privée Lookout>
ListenPort = 11000
Postup = /bin/systemctl restart dnsmasq
[Peer]
PublicKey = <clef publique Nut>
Endpoint = 2001:bc8:6005:1c:208:a2ff:fe0c:686c:11000
AllowedIPs = 10.255.255.1/32
AllowedIPs = 2001:bc8:3335:ff00::1/128
AllowedIPs = 10.255.0.1/24
AllowedIPs = 2001:bc8:3335::/48
et ça marche ! Voilà iperf :
┌ (gilles@Lookout + 0) (31/01/21 - 14:45:45) (0.13 - 0%) (~)
└% iperf3 -c nut.almtesh.net
Connecting to host nut.almtesh.net, port 5201
[ 5] local 2001:bc8:3335:ff00::2 port 59920 connected to 2001:bc8:3335:: port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 25.8 MBytes 216 Mbits/sec 0 598 KBytes
[ 5] 1.00-2.00 sec 28.8 MBytes 242 Mbits/sec 0 663 KBytes
[ 5] 2.00-3.00 sec 29.3 MBytes 246 Mbits/sec 0 766 KBytes
[ 5] 3.00-4.00 sec 33.1 MBytes 278 Mbits/sec 0 887 KBytes
[ 5] 4.00-5.00 sec 35.5 MBytes 298 Mbits/sec 0 979 KBytes
[ 5] 5.00-6.00 sec 35.5 MBytes 298 Mbits/sec 0 983 KBytes
[ 5] 6.00-7.00 sec 34.9 MBytes 293 Mbits/sec 0 1.01 MBytes
[ 5] 7.00-8.00 sec 35.2 MBytes 295 Mbits/sec 0 1.06 MBytes
[ 5] 8.00-9.00 sec 36.7 MBytes 308 Mbits/sec 0 1.06 MBytes
[ 5] 9.00-10.00 sec 35.1 MBytes 294 Mbits/sec 0 1.06 MBytes
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 330 MBytes 277 Mbits/sec 0 sender
[ 5] 0.00-10.02 sec 327 MBytes 274 Mbits/sec receiver
iperf Done.
┌ (gilles@Lookout + 0) (31/01/21 - 14:47:46) (0.70 - 0%) (~)
└% iperf3 -c nut.almtesh.net -R
Connecting to host nut.almtesh.net, port 5201
Reverse mode, remote host nut.almtesh.net is sending
[ 5] local 2001:bc8:3335:ff00::2 port 59924 connected to 2001:bc8:3335:: port 5201
[ ID] Interval Transfer Bitrate
[ 5] 0.00-1.00 sec 24.0 MBytes 201 Mbits/sec
[ 5] 1.00-2.00 sec 21.5 MBytes 180 Mbits/sec
[ 5] 2.00-3.00 sec 20.5 MBytes 172 Mbits/sec
[ 5] 3.00-4.00 sec 20.2 MBytes 169 Mbits/sec
[ 5] 4.00-5.00 sec 21.6 MBytes 182 Mbits/sec
[ 5] 5.00-6.00 sec 24.0 MBytes 201 Mbits/sec
[ 5] 6.00-7.00 sec 20.9 MBytes 175 Mbits/sec
[ 5] 7.00-8.00 sec 23.0 MBytes 193 Mbits/sec
[ 5] 8.00-9.00 sec 23.6 MBytes 198 Mbits/sec
[ 5] 9.00-10.00 sec 25.5 MBytes 214 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.02 sec 227 MBytes 190 Mbits/sec 157 sender
[ 5] 0.00-10.00 sec 225 MBytes 189 Mbits/sec receiver
iperf Done.
┌ (gilles@Lookout + 0) (31/01/21 - 14:48:04) (1.86 - 0%) (~)
└%
Par contre, juste avant, @Clochette, la clef me semble très courte, par rapport à celles d’openVPN, c’est normal ?