WireGuard was connected, Technitium was alive, and .fndhome records existed. The problem was that wg-easy generated client profiles using the wg-easy host as DNS instead of Technitium.
Original work date
June
The problem
The VPN tunnel connected. The phone showed WireGuard as active. Technitium DNS was running. Internal records existed. From the server side, everything looked like it should work.
The environment
- App: WireGuard , Technitium DNS
- Host:
- Cluster / namespace:
- Version:
- Relevant config:
What failed
But the phone still was not resolving internal .fndhome names correctly. The actual problem was the DNS value in the WireGuard client profile. wg-easy was handing out the wg-easy host as DNS instead of the Technitium DNS server.
The fix
The fix was to change wg’s DNS setting to Technitium, regenerate or update the client profile, reload it on the phone, and verify Technitium live logs actually saw the phone’s queries.
Final state
What I learned
VPN connected does not mean DNS is right.
Useful commands / config
It's not DNS
There's no way it's DNS
It was DNS
-- a DNS haikumands here