VPS가 2개 있습니다. VPS 중 하나에서 A i setup Wireguard VPN이라고 부를 수 있습니다. 두 번째 VPS를 VPS A에 피어로 연결했고, 클라이언트로 Wireguard에 연결했는데 서버 B의 로컬 VPN 주소를 통해 웹에 액세스할 수 없습니다. Nginx 로그에는 서버 B가 내 요청을 받았지만 응답하지 않는다고 표시됩니다. 또한 nc -vz 명령도 성공했습니다. 어떻게 해결할 수 있나요? Curl/웹 브라우저에 아무것도 표시되지 않습니다
Server A: iptables -nvL
Chain INPUT (policy ACCEPT 45630 packets, 6884K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 64284 packets, 111M bytes)
pkts bytes target prot opt in out source destination
38 11371 ACCEPT all -- wg-172 * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 92761 packets, 119M bytes)
pkts bytes target prot opt in out source destination
ip r:
default via 1.1.1.1(public ip) dev eth0
10.0.0.0/8 dev wg0 proto kernel scope link src 10.0.0.1
1.1.1.0/24 dev eth0 proto kernel scope link src 1.1.1.1
169.254.0.0/16 dev eth0 scope link metric 1002
172.16.0.0/24 dev wg-172 proto kernel scope link src 172.16.0.1
tcpdump on vpn interface from my laptop
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on utun3, link-type RAW (Raw IP), capture size 262144 bytes
18:19:16.483263 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [S], seq 2006555320, win 65535, options [mss 1380,nop,wscale 6,nop,nop,TS val 666581156 ecr 0,sackOK,eol], length 0
18:19:16.626234 IP 172.16.0.2.http > 172.16.0.3.49685: Flags [S.], seq 2191963124, ack 2006555321, win 27360, options [mss 1380,sackOK,TS val 366766758 ecr 666581156,nop,wscale 7], length 0
18:19:16.626348 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [.], ack 1, win 2052, options [nop,nop,TS val 666581299 ecr 366766758], length 0
18:19:16.626442 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [P.], seq 1:75, ack 1, win 2052, options [nop,nop,TS val 666581299 ecr 366766758], length 74: HTTP: GET / HTTP/1.1
18:19:16.770856 IP 172.16.0.2.http > 172.16.0.3.49685: Flags [.], ack 75, win 214, options [nop,nop,TS val 366766902 ecr 666581299], length 0
18:19:16.770866 IP 172.16.0.2.http > 172.16.0.3.49685: Flags [P.], seq 4105:5074, ack 75, win 214, options [nop,nop,TS val 366766902 ecr 666581299], length 969: HTTP
18:19:16.771006 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [.], ack 1, win 2052, options [nop,nop,TS val 666581444 ecr 366766902,nop,nop,sack 1 {4105:5074}], length 0
18:19:18.237977 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [R.], seq 75, ack 1, win 2052, length 0