I'd like to create #wireguard tunnel between two natted machines. I'm fine with using an intermediate third machine for IP addresses and ports discovery.
The idea outlined in this article sounds verry appealing to me.
However I'm wondering is there something that is developed further beyond a proof of concept I might look at instead? I know there is #tailscale. That sounds too much for me unfortunatelly as I do need to register with them and similar. Thus I'm exploring if there is something I can self host.

jordanwhited.com/posts/wiregua…

WireGuard Endpoint Discovery and NAT Traversal using DNS-SD

In this post we will set out to establish a WireGuard tunnel between dynamically addressed peers that are both sitting behind a NAT.

^{www.jordanwhited.com}

Conclusion is a big yes.

Firebase-host static files under a primary domain .well-known/matrix/{server,client}. Config server to Tailscale Funnel on ports 8443 and 443 (one federation port).

Through a Tailscale Docker container configured as a proxy, traffic can be forward TCP/TLS via socat.

From socat, traefik handles routing to Dendrite.

Was concerned with bandwidth, stability and latency, but things are looking good so far.

#tailscale #traefik #docker #funnel #matrix #dendrite

Probably a billion possibilities of improvement in this, but it actually ended up as a working setup.

I did a write-up of running @matrix Dendrite behind Tailscale Funnel.

#sdn #tailscale #matrix #funnel

252.no/2023-04-24-sdn.html