Wireguard with Public IP behind NAT

submited by

Style Pass

2021-06-18 09:30:10

… or how to host a Dualstacked Public Website behind a IPv4 NAT Box without Reverse Proxy, Portforwarding and other ugly stuff …

inspired by the following Post, i started a little project and redesigned the connectifity for my Hamster’s Webserver :)

i wrote a mail to the guys from tetaneutral.net and asked them for the wireguard vpn service with public ipv4/ipv6 adresses for my server. as i didn’t get any feedback, i had to implement the “Server” on my own.

the main idea is to expose a server with standard internet connectifity and run a public v4/v6 website on these box. as most of the people don’t have static ipv4 addresses at home, they may use their address for other stuff or their provides does not support ipv6, here is a solution for you.

we will establish a wireguard tunnel and initiate the connection from behind the firewall/nat box. the wireguard server assign us a public ip and routes the traffic to us. so, we just an enable the webserver and have full ip connectifity without any ugly nat, portforwarding, proxyservice or other dirty hacks.