split-vpn icon indicating copy to clipboard operation
split-vpn copied to clipboard

Obsolete with UniFi Network Application 8.0.2?

Open realies opened this issue 2 years ago • 4 comments

8.0.2 adds support for WireGuard VPN clients, and traffic from any network can be routed through a WG VPN relatively easily.

Wonder if this comes with all the benefits like the blackholes/killswitch available in split-vpn. TBC.

realies avatar Oct 20 '23 17:10 realies

i've tried testing it out on my udm-pro.

tl;dr: the official one is bugged and i'm reinstalling this one.

the official ovpn does work, however, it leaks (leak is too small a word...) DNS address like crazy which makes it unusable for me. i've tried different vpn providers, it's absolutely on the unifi team to fix this type of stuff. you can read the forums and see others complaining too.

maybe in another year the official one will fully work.

Unlearned6688 avatar Oct 31 '23 19:10 Unlearned6688

@Unlearned6688, I think the leaking issues can be solved with: https://community.ui.com/questions/Prevent-internal-network-traffic-leaking-when-using-a-WireGuard-VPN-client/b929a88a-6e86-497d-a438-93ec40d9a57a#answer/e777b6e5-0295-4575-971a-0f3211f9baea

realies avatar Dec 07 '23 17:12 realies

I'll take a look at it. Thanks.

Btw just as an update: some browsers (specifically iOS Safari (in private mode, DNS flushed)) leak CONSTANTLY with the standard firewall setup. However, also on iOS, Brave browser and Chrome (didn't try others) do not leak. I tried Safari with no add-ons and still it was leaking like crazy. So, in part, the blame might be on Apple too.

Ubiquity seems to have made some progress on the implementing WG configs to make them "plug and chug" although the profile from Surfshark I tried kept connecting then disconnecting... Better than before I suppose. Maybe they're almost there. I've been using OVPN in the meantime paired with other network tools to fix DNS not being correctly applied (Ubiquity seriously needs to get their crap together. Is split DNS and split VPN so advanced for a networking company? This stuff is going to become more and more required as more and more companies keep being annoying with ads and such)

Unlearned6688 avatar Dec 07 '23 20:12 Unlearned6688

Well, the one from Unifi doesn't support IPv6 though! Which is not nice :(

spkis avatar Mar 21 '24 09:03 spkis