Wireguard is blocked in my country, so I no longer can use Tailscale or other Wireguard-based solutions. My home server is behind a NAT. What other ways of secure private connection can I use?

  • exu@feditown.comEnglish
    20·
    10 hours ago

    Self hosted networking! Legitimately one of my favourite topics

    You won’t get around the requirement of a publicly reachable endpoint. That can either be a small server with a public ip or dynamic DNS to your home with port forwarding for the VPN.

    A classic option is OpenVPN. You can run it on Port 443 in TCP mode and while it won’t be performant, it has a better chance of bypassing most simple blocks

    Other than that I’m a fan of completely decentralized mesh VPNs.

    The one I use and am most familiar with is Yggdrasil. Connections can be established over TCP, TLS or QUIC on any port you want.
    I’ve written a somewhat lengthy comment under this post. One advantage to Yggdrasil would be its existing public network. If you can firewall of your home lab to the point where joining the public network doesn’t expose a security risk to your local network, you could use that to transport your traffic instead of having your own public node or port forwarding.

    The same post also mentions Anywherelan, it’s intended to have better NAT handling out of the box by using community nodes.

    Then there’s also EasyTier mentioned at the bottom, it is a Chinese project and those tend to have good censorship resistance.

    Finally I’ll mention Nebula, it requires at least one coordination server but might also be an option