This is an old revision of the document!
Private LAN VPN Access
The scope here concerns use of VPN (Virtual Private Network) to gain secure access from the public network to a local private network. It relates to private secure access and use from the public network. It does not consider public VPNs setup for public use.
There have been considered 3 different levels of access as described by the applications used:
- Wireguard - A VPN server
- Tailscale
- Headscale
- OpenVPN (Old)
These applications and their scope are described further below.
Wireguard
I previously successfully setup KPTree wireguard on my router. This was installed on “bare metal” as was the nftable based router firewall. I later installed Bind9 DNS and Kea DHCP programs in Docker containers. I always run Docker in a VM to prevent Docker's packet filtering from affecting the bare metal firewall rules. I did not move Wireguard to a Docker container as I did not have the need at the time.
Using Docker wireguard from linuxserver.io is much easier that