Hi everybody! I was trying to play with Netmaker 0.12.2 (which looks like an awesome tool btw!) to see if it could work for our setup and I ran into some issues.
Some details on our setup: We have N proxmox hosts (2 in the above simplified example) with a public IP. Each proxmox host has a VM that can access the internet through a masqueraded bridge network (each bridge network has the same IP range, but they are different networks). My goal was to create a wireguard mesh so that I could let nodes talk to each other and also let external clients SSH into the machines. Since each VM is behind NAT, I wanted to use UDP hole punching, so I set up a netmaker server on a standard VPS and created the network with 2 nodes and an external client, but it's not fully working.
More specifically:
- The external client can ping and ssh towards both VM 1 and VM2
- VM1 cannot ping VM2 and vice versa
- Running wg show shows me that the VMs can handshake with the netmaker server (it's in client mode) but they cannot handshake between each other
If I run tcpdump in the VMs, I see some logs like
IP <proxmox host of the other VM> > <hostname of VM>: ICMP <proxmox host of the other VM> udp port XXXXX unreachable, length 184
(where the port corresponds to the random port chosen by the client for the UDP hole punch I guess).
It's not a show stopper because the real need I had at the moment was to ssh towards the machines from the external client, and this is working, however I wanted to double check with you if I did something wrong in the setup or not, as my networking knowledge is super limited. Thanks!!