4 ms·
This might clear up a few things then: https://web.archive.org/web/20220522192804/https://www.dbsysnet.com/how-to-access-a-linux-server-behind-nat-via-reverse-s
by justaj 3y ago
This might clear up a few things then: https://web.archive.org/web/20220522192804/https://www.dbsysnet.com/how-to-access-a-linux-server-behind-nat-via-reverse-ssh-tunnel/ https://web.archive.org/web/20220522192804/https://www.dbsys...
Original article which doesn't contain the first graphic: https://www.xmodulo.com/access-linux-server-behind-nat-reverse-ssh-tunnel.html https://www.xmodulo.com/access-linux-server-behind-nat-rever...
- redleader55 3y agoI am in the same situation with the grandparent. I don't even expose the SSH port to the outside. The only port open is the UDP port of Wireguard which allows only the packets signed by the correct key. Everything works perfectly, no issues with NAT, I even give my mobile devices an IPv6 that my ISP allocates. Tunneling through SSH is significantly worse because you encapsulate a TCP connection inside a TCP connection and it's userspace.
- illiac786 3y agoI have also set up wireguard but I changed my model and only use to troubleshoot. The reason is privacy. I use VPN to obfuscate my IP which means I would have to VPN my entire network. Unfortunately this has proven surprisingly difficult to do properly, meaning with appropriate performance (MTU), IPv6, no blocking (exit IP reputation), etc. Hence I switched to Argo/cloudflare tunnels for pretty much everything.