First: I’ve tried Tailscale, for some reason it works awful for me so I’m avoiding that option if possible.
I am trying to have a single server that has a VPN port exposed to connect to it, but routes traffic through a comercial VPN (mullvad ideally) to privately share my linux ISOs. So far I haven’t been able to achieve this, it sees I can’t use the VPN server (wg-easy) + VPN (mullvad gui), only the one that start first work.
Has anybody achieve something like this?
You must log in or register to comment.
I’ve done exactly this with wg-easy.
My config here is for v14, you’ll want to pin the image version: https://github.com/qdm12/gluetun/discussions/1192#discussioncomment-12973135 Note there’s a small typo in the local network Down rule I added, I’m on mobile right now else I’d copy my current config instead that cleans it up a bit since this post.
In the same thread, someone posted a fantastic guide to get it working with v15. You’ll need to add an iptables rule for full LAN access if you want to enable that: https://blog.bktus.com/en/archives/2918/
V15 was giving me issues because it didn’t allow you to disable ipv6, but apparently the latest edge builds do. I haven’t tried that yet
I’ll try it as soon as I have time!
V15 didn’t work for me, might be the issue you mention, so I’ll stick with 14 for the time being.
Yeah I feel like v15 released a bit too early outside of preview builds. It’s a substantial improvement but doesn’t feel quite ready.
Maybe give Zerotier a shot. Similar premise as Tailscale, but a simplified NAT and routing implementation.
My overall question though is…why??? If you have access to a VPN, why would you connect to another location to use it when you can just use it from anywhere?
I had success using openVPN. I set it up, generated certificates, installed it on my phones, tablets, and laptops.
It won’t work when using an external vpn like Express or Mulvad, but while using it, you have secure connection to home. Once done with the home network, turn off the vpn, turn on your commercial vpn.
Two cases.
One to have my server connect to the internet without exposing my traffic.
The second is to not have to chose between be connected to my server or be connected behind a VPN.
Honestly, if if wasn’t because tailscale is performing badly for the last few months, I wouldn’t have problems using and even paying for it.
I did follow this guide to use WireGuard to connect to my homeserver and use my internal pihole and then connect to the internet with protonVPN.
I use Zerotier. I have a rpi sharing my Linux isos through a commercial VPN. The RPI has Zerotier as well as my other devices, so I can connect to it from anywhere as if it was on my home network.
Tailscale has the funnel command which exposes services like how you describe, but that’s off the table.
Not quite sure I understand your layout, but if these are separate VPNs, you could run one from the server with a port forward (guessing that’s not through Mullvad as they don’t offer forwards any longer - to my knowledge) and then setup the general VPN on your router perhaps so you don’t have to change ip routes for the whole network. You would still probably need to setup an ip route specific to the server VPN traffic on the router at that point, but that would probably be less work.
If this all being done from the same device then you would need to separate them out by IP routes.
