Wireguard peer option DNS

RouterOS
1

Hi can you enable search domain in wireguard peer's "Client DNS" or adding another "Search Domain"
so we have in generated client config file something like "DNS = 10.0.0.1, my.suffix"

3

Hi. Actually, standard WireGuard clients do support search domains in the DNS attribute.

Here is a working example from my setup:

[Interface]
PrivateKey = XXX
Address = 2a02:XXX::10/128, 10.XXX.10/32
DNS = 2a02:XXX::10, 10.XXX.10, ad.XXX.cz
MTU = 1280

[Peer]
PublicKey = XXX
PresharedKey = XXX
AllowedIPs = XXX
Endpoint = XXX:443
PersistentKeepalive = 30

4

Not quite correct. The search domain goes after all DNS servers on the same line:

DNS = 192.168.255.1, dead:beef:dead:beef::1, my.local.domain.com

Kind regards,
Patrick

5

I'm also using it on client devices but unfortunately Winbox force you to use only IPv4 or IPv6 in Client DNS fields. PS. anyway on macOS its working only for full tunnel like ::/0 or 0.0.0.0/0. On split tunnel the suffix is only scoped for that wireguard interface..

6

I noticed that it worked "unreliably" on my Mac. Now I know the exact circumstances. Thank you.
I can convert most remote maintenance connections to full tunnel so I can enjoy internal name resolution.

Kind regards,
Patrick