3 ms·
Yes this is relatively straightforward to accomplish via iptables pre&postrouting rules. I think the key insight is to realize that you're basically asking for
by aftbit 6y ago
Yes this is relatively straightforward to accomplish via iptables pre&postrouting rules. I think the key insight is to realize that you're basically asking for NAT with DMZ:
Internet -> [eth0] WG BOX [wg0] -> [wg0] HOME SERVER
analogous to:
Internet -> [eth0] ROUTER [eth1] -> [eth0] HOME SERVER
- zokier 6y agoYou probably want to have two (or more) interfaces (eni in aws lingo) on the wg server so that you dedicate one for this tunneled traffic. Also you probably want to setup some sort of NAT instead of just routing packets directly.