Connecting Two Hosts in Separate IP Networks using VXLAN and Wireguard Tunnel

Connecting Two Hosts in Separate IP Networks using Wireguard VXLAN Tunnel

In this article, we will discuss how to connect two hosts in separate IP networks using Wireguard VXLAN tunnel. Specifically, we will cover the following:

• An overview of Wireguard and VXLAN technology
• Setting up a Wireguard tunnel between two hosts
• Creating a VXLAN interface on top of the Wireguard tunnel
• Testing the connectivity between the two hosts

Overview of Wireguard and VXLAN Technology

Wireguard is a modern, simple, and fast VPN that utilizes state-of-the-art cryptography. It aims to be more secure, efficient, and easier to configure than traditional VPN solutions like OpenVPN and IPsec. Wireguard has been gaining popularity in recent years for its simplicity and performance.

VXLAN (Virtual Extensible LAN) is a network virtualization technology that allows for the creation of virtual Layer 2 networks over Layer 3. It enables the encapsulation of Layer 2 frames within Layer 4 UDP packets for transmission over a network. VXLAN is widely used in data center networks for its ability to create scalable and secure virtual networks.

Setting Up a Wireguard Tunnel Between Two Hosts

The first step in connecting two hosts in separate IP networks is to set up a Wireguard tunnel between them. Here are the steps:

1. Install Wireguard on both hosts
2. Generate a private and public key pair for each host
3. Configure the Wireguard interface on both hosts with their respective private and public keys and IP addresses
4. Enable IP forwarding on both hosts
5. Start the Wireguard service on both hosts

Creating a VXLAN Interface on Top of the Wireguard Tunnel

Once the Wireguard tunnel is established, we can create a VXLAN interface on top of it to enable Layer 2 connectivity between the two hosts. Here are the steps:

1. Install VXLAN software on both hosts
2. Create a VXLAN interface on each host, with the same VNI (VXLAN Network Identifier) and remote IP (the Wireguard IP address of the other host)
3. Configure the VXLAN interface to use the Wireguard interface as its underlying interface
4. Bring up the VXLAN interface on both hosts

Testing Connectivity Between the Two Hosts

Once the VXLAN interface is set up, we can test the connectivity between the two hosts. Here are the steps:

1. Ping the Wireguard IP address of the other host to verify the Wireguard tunnel is working
2. Ping the MAC address of the other host's VXLAN interface to verify the VXLAN tunnel is working
3. Test the connectivity of any Layer 2 applications, such as a virtual machine, between the two hosts

• In this article, we discussed how to connect two hosts in separate IP networks using Wireguard VXLAN tunnel.
• We covered the steps for setting up a Wireguard tunnel, creating a VXLAN interface on top of it, and testing the connectivity.
• Wireguard and VXLAN are powerful technologies that can provide secure and efficient network connectivity.

References

• Wireguard Website
• VXLAN Wiki
• How to Set Up and Configure a Wireguard VPN Server on Ubuntu 20.04
• Configure a VXLAN Tunnel Between Two Servers