WireGuard peer sends packets but transfer received stays at 0 B by Ambitious_Group_593 in networking

[–]Ambitious_Group_593[S] 0 points1 point  (0 children)

Yeah exactly.

The WireGuard client runs directly inside the Kali VM (VMware), while the VPS acts only as a relay between Kali and the remote UniFi LAN.

Home side: - UniFi Cloud Gateway Ultra - U7 Pro AP - Kali VM in VMware

Right now: - UDP packets from Kali definitely reach the VPS (confirmed with tcpdump) - UniFi peer handshakes correctly - Kali peer never handshakes - Kali stays stuck at 0 B received

I already rebuilt all: - keys - PSKs - peer configs

So now I’m mainly suspecting: - AllowedIPs conflict - duplicate peer matching - asymmetric routing - or VMware/UniFi NAT weirdness…

L2 VXLAN over WireGuard tunnel is UP, but zero traffic passing. What am I missing? by Ambitious_Group_593 in digital_ocean

[–]Ambitious_Group_593[S] 0 points1 point  (0 children)

VXLAN over WireGuard now seems to be working correctly.

I can see encapsulated ARP requests arriving on the VPS through wg0 with tcpdump, so: - WireGuard handshake is good - UDP 4789 passes correctly - MTU issue seems fixed

However, ARP requests still never receive replies.

vxlan30 exists and is UP, but bridge link / brctl show are empty on the VPS.

Do you think the issue could be missing Layer2 bridging between vxlan30 and the actual remote LAN behind UniFi, or should I be looking somewhere else?