Is there any possibility to get wireguard working to access my raspberry pi from outside my home? I’ve port forwarded the wireguard udp port and it doesn’t work… Likely because I’m behind a NAT. My wan public ip is like 10.x.x.x which is most likely a private ip. Running tailscale for now

  • SK4nda1@lemmy.ml
    link
    fedilink
    English
    arrow-up
    22
    arrow-down
    3
    ·
    1 year ago

    I’d advise to use headscale on a vps somewhere. Its tailscale but selfhosted.

    • biscoot@lemmy.getmeotter.work
      link
      fedilink
      English
      arrow-up
      8
      ·
      1 year ago

      Not OP, but thanks for sharing about headscale. I wasn’t aware this existed. Probably won’t make a switch to it anytime soon, personally. I have way too much connected on tailscale right now.

  • Schmeckinger@feddit.de
    link
    fedilink
    English
    arrow-up
    6
    ·
    1 year ago

    Another thing is if where you want to access it from has a IPv6 then you can just connect via IPv6.

  • DevoidWisdom@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 year ago

    I’m in the same boat so I setup a $2.50/mo VPS and that’s my gateway. It took a little bit to get the nftables on vps to work right. I’d recomemned tailscale or similar if you want easy, though I’ve not ever used them myself.

    • Schmeckinger@feddit.de
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      1 year ago

      What would be the added latency. I was thinking of doing something like this and I could get a 3$ month VPS about 30km from where I live. I was thinking of doing something like that for remote gaming on my powerful desktop. Annoyingly I have cgnat and a IPv6 from where I live and no IPv6 from where I want to access it.

      • DevoidWisdom@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        At best it will add whatever the extra hop is and any network congestion. My VPS host is 2200km away. I should find a closer one… but it adds 160ms with some spikes in the 200-300 range. This is round trip 4400km roughly All things considered not too bad. My VPS is a 1vCPU, 1GB ram, 1Gbit unmetered, only as wireguard server. Hope that helps.

        • Schmeckinger@feddit.de
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          The VPS I would book would be the same and the CPU is a unnamed intel 2.6 ghz, so that sounds good.

  • Knusper@feddit.de
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 year ago

    It is definitely possible, yeah. Tailscale and similar don’t do magic either.

    I’m not sure on the specifics, though. I think, you want a TURN server or a STUN server.

    • vzq@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I’ve gotten decent results with NAT traversal tricks, but the only way I’ve gotten it to perform reliably is with a relay fall back.

      This is exactly what you get with tailscale.

  • pyt0xic@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    You need to expose the ports you want to access on an external, publicly accessible server like a cheap vps. Then you can use wireguard to forward the traffic to your Pi.

    I haven’t done it in a long while, so I can’t explain it well enough, try searching for “vps wireguard gateway”. That should bring up some blog posts that will explain the process better. I used a VPS I got on the AWS free tier, you really don’t need anything expensive.

  • TheHolm
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    Just get VPS and use it to bounce traffic between nodes.