NETWORK ADMINISTRATIONSwindows dns serverWindows server

Build your OWN WireGuard VPN! Here's how

Get an exclusive Surfshark deal! Enter promo code REDSHIRTJEFF for an extra 3 months free at https://surfshark.deals/REDSHIRTJEFF

Support me on Patreon: https://www.patreon.com/geerlingguy
Sponsor me on GitHub: https://github.com/sponsors/geerlingguy
Merch: https://redshirtjeff.com
2nd Channel: https://www.youtube.com/c/GeerlingEngineering

#Sponsored #RaspberryPi #VPN

Links to everything mentioned in this video:

– PiVPN: https://pivpn.io
– Surfshark (extra 3 months free): https://surfshark.deals/REDSHIRTJEFF
– First five minutes Linux security with Ansible: https://www.youtube.com/watch?v=gV_16dU7XjM
– RedShirtJeff.com ‘It was DNS’ shirt: https://redshirtjeff.com/listing/it-was-dns-shirt?product=211

Contents:

00:00 – I need my OWN VPN
00:32 – What you need
01:57 – Sometimes you need a different KIND of VPN
02:59 – PiVPN on a Pi
03:47 – PiVPN Setup
05:34 – Security – you’ve been warned
06:17 – Setting up our first VPN connection
07:41 – Speeeeed
08:17 – Home Assistant from anywhere on my iPhone
09:06 – Debugging VPN problems
09:49 – No Static IP? No problem!
11:02 – CG-NAT? Yeah, that’s a problem
11:55 – Do you really need your own VPN?

source

by Jeff Geerling

windows server dns forwarder

23 thoughts on “Build your OWN WireGuard VPN! Here's how

  • Yep, Wireguard impressed me … and they did integrated it inside linux kernel … which give us total control of our own configuration ..

    Traditional way is more reliable when it comes to Zero-Trust …

  • If your behind CGNAT and therefore dont have a public IPv4 Adress couldnt you just host it via IPv6?

  • For the IP changing, I wanted to limit the access a DDNS service had on my DNS registrar, so I got a free Pulesway RMM account, that let you monitor 2 devices and when the RMM agent on my server detects an IP chnage I get an email and alert via the app on my phone and then change the DNS record manually, a 2 min job.

  • I've been using this for a year or more now. It's great that with Android at least it adds the wireguard tunnel into a quick access button next to my wifi and torch. Don't even have to open the app to turn it on, it's been great.

  • I have this setup successfully setup on my Pi4 with wireguard. But why can't I see my NAS server on my VPN?

  • I was excited by how easy pivpn was until I couldn't get any packets, then discovered CGNAT is a thing and Starlink uses it 🙁 Time to struggle through manually setting up wireguard on a vps, lol

  • One option to deal with IP address changing is to setup a TOR hidden service which can serve as a backup if your IP changes.

  • I already had Pi-Hole installed. I followed this video after pausing, replaying at a slow speed to see what I was missing. I was able to get the VPN running perfectly on my Pi 4 Model B with my Samsung 22 Ultra. It worked so effortlessly on the first try. Now I can use public wifi and not be worried about people monitoring what I an doing. Thanks for posting this video.

  • 5:04 How do I grab my ip again? When I do a curl request on that site, it said that I have to pay to request it.

  • SCP is just a (really useful) CLI for SFTP

  • Why spend a hundred plus dollars on a raspberry pi when , as I've done in the uk , spend only 1.20 gbp per month ( roughly a dollar) on could space with a public ip and unlimited traffic ? 12 dollars a yr is way better than a 100 dollars on rpi any day

  • I just uploaded PiVPN case for Raspberry Zero 2 W to Printables if someone is using PiVPN Zero wirelessly. Would've thrown link for PiVPN creators, but I don't have github and don't want to pester devs 🙂

  • Does anyone know exactly how to get the client set up on a Linux-based machine, i.e. Ubuntu? There's no select-and-click option as there's no official GUI, and I'm struggling trying to parse exactly what I'm supposed to do with the scp'd file using the WireGuard CLI.

  • Nice, last time I came across PiVPN it was OpenVPN only. I think I'll take another look. Thanks Jeff!

  • Thank you for this video. I recently found out about Tailscale and my jaw dropped with features like taildrop or seamleass user friendly experience.

Comments are closed.