What you’re looking for is called vpn. Get a couple routers that support IPsec vpn. You can even build your own.
zerotier may be an option really easy on the user end. Not easy to self host though, but free for the normal version.
best solution. very easy to self host in docker.
Router is the key!
- install wireguard on both ends, one will be the server other is the client.
- add necessary iptables rules on server and client.
- if you have a router, without gateway route destination network requests to the local wireguard host.
- if you have a router, route destination network requests to local wireguard host.ient in the local network. ( your local wireguard host as gateway)
Doesn't this require port forwarding? Or does running wg on the router eliminate the need for port forwarding?
I've port forwarded in the past with no issues. But in learning more about networking and such, it seems that port forwarding is riskier than it's worth, and am trying to find best practices to use going forward.
if the Asus router has wireguard server capabilities, you're in luck.
on house B, port forwarding is not necessary because the router will handle it.
on house A, because pfSense will work as a client port forwarding is not necessary either.
You may want to look into running your own router at both sites, then you can iniate a link between them via a tunnel/vpn/your pick and they route between the two sites.
If your looking for tutorials, I'd highly recommend haveing a look at some videos from Lawrence Systems on how to set up something like pfsense.
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
For Example
We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.
Useful Lists