Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/mochman/Bypass_CGNAT
Wireguard setup to bypass CGNAT with a VPS
https://github.com/mochman/Bypass_CGNAT
Last synced: 10 days ago
JSON representation
Wireguard setup to bypass CGNAT with a VPS
- Host: GitHub
- URL: https://github.com/mochman/Bypass_CGNAT
- Owner: mochman
- Archived: true
- Created: 2021-03-08T17:20:04.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2023-01-09T21:35:36.000Z (almost 2 years ago)
- Last Synced: 2024-06-28T06:36:28.493Z (5 months ago)
- Language: Shell
- Size: 2.04 MB
- Stars: 590
- Watchers: 20
- Forks: 51
- Open Issues: 8
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Bypassing a CGNAT with Wireguard
## Overview
Before switching ISPs, I had a public IP that allowed me to use port forwarding on my router to pass traffic to services hosted on my internal network. My new ISP uses a CGNAT, so I had to find a workaround. I chose this path, because it keeps pretty much everything the same for my services. The main things I wanted to do with my setup were:
* Forward only specific traffic from the internet to my services
* Provide my NPM (Nginx Proxy Manager) Server with clients real IPs (for fail2ban blocking purposes)
* Allow for traffic to flow to internal services that NPM doesn't manage
I went through a couple configurations and VPS providers before I created this solution. Prior to attempting this, I had little to no knowledge about VPS providers, wireguard, ufw, and iptables. Getting it to work the way I wanted took a few days of research, trial, and error.
This will hopefully be a useful tutorial for people who are in a similar situation.
This tutorial assumes you have some basic knowledge about how to use Ubuntu from the command line.
Here is a basic diagram of my configuration. The IPs and ports will need to be changed by you to meet your requirements.
## Tested with:
* Digital Ocean ([link](https://www.digitalocean.com/products/droplets/))
* Oracle Cloud ([link](https://www.oracle.com/cloud/))
* AWS Ligthsail ([link](https://aws.amazon.com/lightsail/))
## If this is something you would like to try out, please go to the [wiki section](https://github.com/mochman/Bypass_CGNAT/wiki) to start the tutorial.
# Other ways to bypass a CGNAT
[Wireguard Installer for Gaming](https://github.com/xiahualiu/wg_gaming_installer) - Can be used to bypass a CGNAT so you can have a **Full Clone NAT**
[Cloudflared Tunnels](https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide/)
[BoringProxy](https://boringproxy.io/)
[ZeroTier](https://www.zerotier.com/) [(u/RedKyet's Tutorial)](https://www.reddit.com/r/selfhosted/comments/u8n5hz/how_to_bypass_cgnat_and_expose_your_server_to_the/)
[Awesome-Tunnel](https://github.com/anderspitman/awesome-tunneling) - List of many open/closed source tunneling solutions.