DNS forwarding issue, Wan load balancing issue

[pepe]

@davkan

The remaining issue seems to be that client networks can’t traverse the site-to-site wireguard vpn with load-balancing wan enabled. I can ping into the other site from the vyos router but cannot ping from clients on this site. Any idea why that might be? I tried adding load balancing rules for the wireguard interface but that had no effect. Running a traceroute shows that attempting to ping an address in the 10.4.0.0/16 space from a client is routed out the current gateway instead of over the wireguard tunnel. A traceroute on the router correctly follows the static routes configured for wireguard.

You must exclude wireguard interface form load-balancing, try this:

set load-balancing wan rule 1 inbound-interface wg01
set load-balancing wan rule 1 exclude