r/WireGuard•
444fox

VPN without port forwarding

Is there any way to set up a site so that site A can have a network connection to site B and C without opening a port at any of the sites,

​

I have three 4g modems and because of the way 4g modems work I can't port forward anything, only NAT works

Posted Apr 6, 2022, 12:07 AM UTC

17
flaming_m0e•

TailScale or Zerotier. There are probably a couple of others

6
16JKRubi•

You could try Tailscale, installing it on one "server" at each site then setting those up as subnet routers. ETA: Tailscale Site-to-Site KB

But for what you're trying to do, I would probably buy a small VPC (AWS or other) and set it up as VPN server with your preferred VPN (IPsec, OpenVPN, etc). That way each site could connect outbound to the pretty server easily and it would be easier to make changes in the future (hardware changes, site expansion, etc).

1
ThiefClashRoyale•

Tailscale like others said. Its cheap enough to pay for.

1
PkHolm•

There is self-hosted version of tailscale. But you need to host it somewhere. Plus check nebula, it is also needs globaly reacheble host. You can use Oracle cloud to host small vpc for free.

1
pretty-cool-stuff•

You need UDP hole punching for this, which requires a 3rd party tool, like Netmaker, which sets up WireGuard connections and does endpoint discovery.

1
Norbert-89•

What’s your goal with VPN?

1
[deleted]•

[removed]

0