Connect Lan to Remote Lan reddit / selfhosted ---------------------------------------------------------------------- krusherkid · 2023-10-27 02:32 I'm sure there's a post about this already, but I don't really know how to search for it to find the answer, so I apologize in advance for that. I have some self hosted services in 2 separate houses that are 2 hours away from each other. I use tailscale to access them on my devices, but I've experienced some nuances with Tailscale that would be impossible to walk other members of the two households through trouble shooting. I want to avoid port forwarding if I can. There are docker services at house A at 192.168.86.5 that I would like the users of house B at 192.168.4.x to be able to access without extra software being added to each phone, TV, and computer. Would anyone be able to point me in the right direction, either by search keywords or even links to how to do this? ---------------------------------------------------------------------- kjames2001 · 2023-10-27 03:00 Simply enable routing on tailscale. ---------------------------------------------------------------------- krusherkid · 2023-10-27 03:17 My understanding is that this only allows tail scale clients to access the LAN of the advertised routes. Is that not the case? ---------------------------------------------------------------------- elh0mbre · 2023-10-27 03:51 This is the case. Or at least I could never find anything that would allow it. I ended up using this for my site to site connectivity: [https://www.defined.net/](https://www.defined.net/) And separate cloudflare tunnels for external access to each ---------------------------------------------------------------------- PossibilityOrganic · 2023-10-27 05:26 zerotier may be an option really easy on the user end. Not easy to self host though, but free for the normal version. ---------------------------------------------------------------------- eddster2309 · 2023-10-27 05:47 If you are running a more advanced router like OPNSense, you can run tailscale on the router and use Nat routing rules to allow both sites to access the tailnet from any device connected. ---------------------------------------------------------------------- AstrologicalMob · 2023-10-27 06:06 You may want to look into running your own router at both sites, then you can iniate a link between them via a tunnel/vpn/your pick and they route between the two sites. If your looking for tutorials, I'd highly recommend haveing a look at some videos from Lawrence Systems on how to set up something like pfsense. ---------------------------------------------------------------------- bevillinglu · 2023-10-27 08:11 Router is the key! ---------------------------------------------------------------------- trincarleoi · 2023-10-27 08:14 Router is crucial for network setup. ---------------------------------------------------------------------- arcadianarcadian · 2023-10-27 08:56 \- install wireguard on both ends, one will be server other is client. \- add necessary iptables rules on server and client. \- if you have router, route destination network requests to local wireguard host. \- if you don't have a router, add a route for the destination network in every client in the local network. ( your local wireguard host as gateway) \- if you have a router, route destination network requests to the local wireguard host. ---------------------------------------------------------------------- krusherkid · 2023-10-27 13:59 House A is running pfsense. ---------------------------------------------------------------------- krusherkid · 2023-10-27 14:13 Doesn't this require port forwarding? Or does running wg on the router eliminate the need for port forwarding? I've port forwarded in the past with no issues. But in learning more about networking and such, it seems that port forwarding is riskier than it's worth, and am trying to find best practices to use going forward. ---------------------------------------------------------------------- arcadianarcadian · 2023-10-27 15:03 if the Asus router has wireguard server capabilities, you're in luck. on house B, port forwarding is not necessary because the router will handle it. on house A, because pfSense will work as a client port forwarding is not necessary either.