Skip to content

Limit traffic on VPN

trinib edited this page Apr 27, 2022 · 2 revisions

Delete in allowed IPs 0.0.0.0/0, ::/0

Because it routes all traffic to your home network which will be slow. You need send traffic through your local addresses only.

  • First you need to replace it with your network gateway but setting the last number to a zero and prefix length to 24. For example: 192.168.1.1/24 to 192.168.1.0/24 or like my ISP router 192.168.100.1/24 to 192.168.100.0/24.

PLEASE READ ! BE AWARE !

IMPORTANT: If your network has IP addresses for devices that ends with a 3 digit number (more than 24), for example: 192.168.100.254, you will not be able to route properly from outside network because applying 24 only allows numbers 1 through 24. You need to instead put 0 to route out of the 24 range.
For example : 192.168.100.0/0.

Or you can change IP range on your router (in my experience you might get a tiny bit better speeds cause it will not route unnecessary allowed IP addresses over the 24 range).

IPv6

For IPv6, when connected to WiFi you need to enter in WireGuard allowed IPs fe80::1/0 as well. For example 192.168.100.0/0, fe80::1/0

When connected to Ethernet cable on a Windows PC, you need to enter ::1 in IPv6 address in "Internet Protocol Version 6(TCP/IPv6)" preferred DNS server.

Then go to https://ipv6leak.com/ and you should see "Your IPv6 is not leaking".

If anyone knows any tweaks to get better traffic speed for wireguard, please contribute.