Hi all,
Looking to create a tunnel to my home network to access certain things. I would greatly appreciate if anyone has the experience. I have consulted ChatGPT and searched around but, the info is either outdated or simply wrong.
Thank you.
Don’t use PiVPN… it’s discontinued and barely maintained now.
Just use a GL.iNet router which makes this whole process extremely easy. Even has a built-in Dynamic DNS you can use for free. Links to instructions here (both written and video): https://thewirednomad.com/vpn
I use tailscale for remotely access devices securely and those behind double NAT.
Check this for devices with low disk space ( routers )
I think this can be realized in many ways.
Here is mine:
Running a wireguard vpn on my router (openwrt). This works directly, because my ISP assignes a public IP to me. The only additional thing is I have to track my public IP with a DynDNS service, because it changes dynamically from time to time.
Use passwall with simple one script
Wait till install
Then you can use any vpn on your router
Here’s link
just do the process as it says on the wiki, but the important thing you must do is to make the rules to wireguard work.
In my case, I create a zone for wireguard and check masquerading. Allow firewall destination to lan and wan and accept all [input, forward and output].
On the port forward tab, make a rule to forward the UDP port to the router itself.
On the rules tab, make a rule to forward the UDP port from wan
,
if you want, put this onto chatgpt and maybe it can explain or do better than me.
PD: because English is not my mother language
GL.iNET router + tailscale (and if you want whole selfhosted then headscale).
Just use this, it’s great
Thanks. I have one of these already and it works amazing. I apologize I did not was clear enough. I would like to access from the road on a laptop and phone. The current gl inet I have is router at home and the travel one.
Don’t use PiVPN… it’s discontinued and barely maintained now.
I am still using it from a machine I setup ages ago. Isn’t it just a dormant script that generates necessary keys pairs and give me a qr code? It is just wireguard with wg-quick managing the actual VPN. What else would you recommend if you already have a working and running setup?
I will consider this option. thank you!
Thanks. I’ll check it out. Looks like I will need to order a Pi
You don’t actually need the travel router to access the home server. You can just download the WireGuard clients on your laptop and phone. And generates a client profile config for each on the server.
If you don’t have something else already running 247, then yeah i recommend a raspberrypi.
Otherwise it’s just a piece of software that can run on most stuff
will look into this now as I have not done it. Thanks!
Yep. No worries. WireGuard has an app in both the macOS and iOS App Stores. Unless your Mac is old like from 2015 (ex. macOS Big Sur).
I did it on the phone! Easy peasy. Thanks for this!
Yep, QR code makes it super fast. Just don’t forget to enable the “Use DDNS” at the top of the client before adding the client to your device. Assuming you’ve enabled DDNS on the server because you don’t have a static public IP at home.