Hi,
not sure where else to post this. For a while now, I’ve unsuccessfully been trying to get WireGuard to work with Crunchyroll.
Setup is as follows:
- dedicated server hosts a wg-quick instance in [neighboring country]
- OPNSense acts as peer on a single IP
- I have a rule for routing the entire traffic of some source device via that IP
This works just fine. Handshake successful, traffic is routed via the server. traceroute shows the server as the hop immediately after my device’s local gateway. The connection is stable, and fast.
…except for Crunchyroll. The site / app itself is fine, but I can not, for the life of me, get a video to play. It just keeps loading forever.
I don’t think this is an issue with CR recognizing that I’m not where I say I am - looking online, it seems pretty easy to use CR with a VPN. I’ve also tried from multiple other devices, all with the same symptom.
If anyone has suggestions, I’d love to hear them 😅
EDIT: It was MTU. Had to manually set it to 1500 on both devices.
Nope, still the same issues. I was using the fallback interface there briefly.
EDIT: It WAS MTU related, I had to enable MSS clamping on the OPNSense.
You must log in or # to comment.
Potential double (triple) nat issue? Do any other streaming services work?
I don’t have accounts on any other streaming services 😅 YouTube works, though
Do you have a suggestion how to eliminate this as a possibility?
Do you run pfblocker-ng? Try using it with another DNS service
Hi,
no, sorry :(
I really don’t think it’s DNS (famous last words, I know)
Try switching your browser to a mobile view and see if that works. I have a hunch.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
Fewer Letters More Letters DNS Domain Name Service/System HTTP Hypertext Transfer Protocol, the Web VPN Virtual Private Network
[Thread #835 for this sub, first seen 27th Jun 2024, 21:25] [FAQ] [Full list] [Contact] [Source code]
Maybe DNS problem?
I’m able to resolve DNS requests from the device. But maybe I’m misunderstanding your question? 😅
Yeah I mean, are you using the same DNS resolver in the server and client?
Ah, alright. Yes, I’ve just double checked. The server end of the tunnel provides a dns server, and the client is configured to use that as its only dns server.
