Wireguard / Emby / Tvheadend

  • Hi,

    I've been using libreelec for some years now.... I have a remote 6 tuner tvheadend server (bare metal) in an enterprise network, I have a wireguard server which is providing access to my Tvheadend server all that is working beautifully at wire speeds I'm pleased to add.

    my Libreelec 9.2 box at home obviously has the wireguard client config,but it also has docker apps loaded one of which is Emby which is loaded via Iinuxserver.io, now before I installed wireguard I could access my Emby server anywhere outside of my local lan from the internet.

    not anymore

    I'm aware it's the wireguard connection is causing all traffic to be routed down it's own pipe, so my port forward from my home wifi/router is being dropped to my emby server on eth0, I can access the emby server locally on my lan on either eth0's ip address or the ip address of the wg0 connection, which I find weird because if I can access it on the libreelec eth0 IP, why can't I port forward to it from the wifi/router.

    my wg0 connection sits on 192.168.10.0/24 my eth0 sits on 192.168.1.1/24 and my tvheadend server sits on 10.11.60.0/24 obviously routed through the wg0 interface

    try as I might and I've tried all sorts I cannot get the port forwarding to work, what am I missing?

    are there any quick and dirty solutions to this ? I've tried using connmanctl move-after for the vpn connection in the wireguard service file, that just killed the vpn dead even though it was still up

    and running

    basically I need to allow my port forward to port 8096 on either my wg0 connection or to my eth0 connection on my libreelec box, I don't care which as long as it works

    wg0 = 192.168.10.3

    eth0 = 192.168.1.175

    tvheadend = 10.11.60.67


    libreelec

    Kernel IP routing table

    Destination Gateway Genmask Flags Metric Ref Use Iface

    default * 0.0.0.0 U 0 0 0 wg0

    10.11.50.24 * 255.255.255.255 UH 0 0 0 wg0 <--- DNS

    10.11.50.25 * 255.255.255.255 UH 0 0 0 wg0 <--- DNS

    172.17.0.0 * 255.255.0.0 U 0 0 0 docker0

    172.18.0.0 * 255.255.0.0 U 0 0 0 br-097f0555877e

    192.168.1.0 * 255.255.255.0 U 0 0 0 eth0

    192.168.1.1 * 255.255.255.255 UH 0 0 0 eth0

    192.168.10.0 * 255.255.255.0 U 0 0 0 wg0

    (vpn endpoint) dsldevice.lan 255.255.255.255 UGH 0 0 0 eth0


    Any help appreciated :)