How to VPN with a cable modem without portforwarding + atttached dsl firefox router?

VPN
1

Hello VPN Communtiy.

I have a litte problem and dont know what to do.

I have a cabe-modem because of no DSL availability. Only Cabel to Internet. But my provider gave me shitty modem. It doesnt have portforwarding. Only IPv6 Host Exposure.

So i bought a firefox router and at tached it to my modem. I enter the Internet through my firefox router. My router sees the network of my modem as the WAN entry point.

I need to use a IPv6.

My modem doesnt support DynDNS. If I set the VPN through my Router up - it doesnt work BECAUSE the public IP it wants to use - is a modem network IP. My Router IP-range and Modem IP-range are different. 2 different networks.

My Modem is my bridge to my router if Im not wrong.

Do I maybe need a better Cable-Router?

My Problem:

I want do use a docker VPN to enter my homenetwork/selfhostet services. How do I need to modify my docker compose file?

https://github.com/linuxserver/docker-wireguard

---
services:
  wireguard:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE #optional
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - SERVERURL=wireguard.domain.com #optional
      - SERVERPORT=51820 #optional
      - PEERS=1 #optional
      - PEERDNS=auto #optional
      - INTERNAL_SUBNET=10.13.13.0 #optional
      - ALLOWEDIPS=0.0.0.0/0 #optional
      - PERSISTENTKEEPALIVE_PEERS= #optional
      - LOG_CONFS=true #optional
    volumes:
      - /path/to/wireguard/config:/config
      - /lib/modules:/lib/modules #optional
    ports:
      - 51820:51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped
2

Your absolute easiest route would be to use tailscale.

Otherwise looks into noip

Or there are guides around for setting up your own DDNS, you can do this for free with CloudFlare.

3

If i selfhos DDNS - do i still need to connent it with my router?

Edit: Tailscale Built on WireGuard. Its a VPN-Serverice? If so than it will have the same effect like a selfhostet VPN - In my case useless. My Problem is → Cable Modem to Outside + Modem Bridge to DSL Router + I am connetet to Router + Modem is unable to use portforwarding/DDNS. And i dont want to use it. Everything needs to be selfhostet.

4

If your router can’t forward the port from external to your VPN container something like tailscale is your only option.

DDNS you can solve in a self hosted way with a little googling, it doesn’t need to be done on the router, you can use CloudFlare to sync an A record and use a URL instead of the IP address.

5

Tried Tailscale. Thanks. It worked