Comment on hosting a VPN with a different ISP
ShellMonkey@piefed.socdojo.com 4 weeks ago
If only one side is behind a NAT then so long as that one initiates the tunnel it should work fine. NAT only really is a problem on the inbound side.
Comment on hosting a VPN with a different ISP
ShellMonkey@piefed.socdojo.com 4 weeks ago
If only one side is behind a NAT then so long as that one initiates the tunnel it should work fine. NAT only really is a problem on the inbound side.
muusemuuse@sh.itjust.works 4 weeks ago
The firewalla is set up to wait for and respond to WireGuard tunnel requests and we like that as it is. We want to keep using that. We just don’t know if T-Mobile will fuck that up.
ShellMonkey@piefed.socdojo.com 4 weeks ago
Right, and if both sides have their public ally routable IPs on their respective firewalls it'll work. If on gets put behind a NAT of some sort then it would be able to speak outward, but would require specific packet routing inward (port forwarding) to have someone connect in. Stateful sessions will be fine so long as the one inside a NAT is the initiator.