Setting up VPNs for Netflix (Home VPNs)
reddit / selfhosted

----------------------------------------------------------------------
BrianSal_05 · 2023-12-22 21:21

Hi,

So I want to setup a VPN connection between my parents home and my
apartment I been researching a little bit haven't truly gone to deep
into it, but from previous attempts I would like if you guys could
give me tips/recommendations as well as clearing up some doubts I
have.

**Situation:**

***Apartment (Server Side):***

* Pfsense Firewall (Virtualized).
* VMware ESXI server.
* (Could Setup another VM for the VPN Server)


***Parent's (Client):***

* Regular ISP provided router
* Client Endpoints.
* (I could potentially setup a PFsense appliance at their home, over
the holidays.)

1. My concerns are that both of our IPs though public (AKA not NAT,
dynamic IP) change from the ISP, is this a concern?
2. Certificates, I think I'm gonna need them, I'm gonna dabble with
Certbot and OpenSSL, or do I need to buy a cert? Do I even need them
at all I see people don't talk about them much?
3. Also though I'm trying I haven't been able to find much information
on setting up the Access Sever. would a minimal Ubuntu server suffice?
4. My objective is to direct the traffic through the VPN not to give
access to my home network, is this configurable I tried to this with
Twingate, but I couldn't figure it out.

----------------------------------------------------------------------
mascalise79 · 2023-12-22 21:31

PF sense site to site wireguard.. don't need certs.  firewall rules
will take care of what you want to block.

----------------------------------------------------------------------
ech1965 · 2023-12-22 21:33

install tailscale.

Set up exit note  at the place where the connectio is the better (
fastest upload..)

----------------------------------------------------------------------
BrianSal_05 · 2023-12-22 21:48

Thanks,I knew PFsense had some VPN traffic options I'm gonna try it
out.

----------------------------------------------------------------------
BrianSal_05 · 2023-12-22 21:49

I'm gonna take a look at it, how different is tailscale from zerotier
or twingate?

----------------------------------------------------------------------
zfa · 2023-12-22 21:56

Like asking how lemonade differs from cola. Just different but same
market. Tailscale has more funding, more polish and is market leader
so probably easier to get assistance with tbh. So big that popular
channels like Linus Tech Tips have published videos doing literally
exactly what you want centred around it, for example.

----------------------------------------------------------------------
YourMumsGlasses · 2023-12-23 15:59

I have a house I own and one I rent. I run pfsense at each house with
a WireGuard tunnel between them. Setup was not too bad, but tuning
performance required some work. Now it’s rock solid. Also, both sites
use dynamic dns.

However, if you only want your Netflix traffic to appear to come from
one place and you don’t need wider site-to-site routing, don’t over-
complicate it. Install Tailscale on a device whichever location has
the faster upload (let’s call this house1) and set the option for it
to be an exit node (both on the device and the cloud portal). Then at
the other house (house2) use an Apple TV. You can install the
Tailscale app on it and use it to tunnel through the other house (by
setting it to use the exit node at house1). By default it should not
be able to hit the local stuff at house1, but all its traffic will
appear to come from there.

Feel free to DM me if you want to discuss further. I’ve spent a lot of
time messing with this.