[Discuss] Wireguard and Traveling and Network Overlaps oh my!

[markw at mohawksoft.com (markw at mohawksoft.com)]

> On 10/21/24 09:24, markw at mohawksoft.com wrote:
>> You set a rule that specific IPs be sent out through the VPN virtual
>> interface.
>
> Just so long as you don't need access to the local version of those
> addresses. (The hotel's gateway to get to the rest of the internet? DNS?
> Room service?)

Well, if there is an IP collision, you can use ports and/or protocols as
well. You can also use iptables to direct either on its own or in tandem.

>
> Maybe use 10.<8-randomly-chosen-bits>.<8-randomly-chosen-bits>.00/24 for
> your VPN, then put your key machines at randomly chosen addresses for
> that last octet, and those set up rules for those specific IPs.

You VPN needn't expose your home IP at all. All you need to do is create a
routing table for a rule to use. When the rule identifies how a packet
should be routed, it will choose the correct routing table to use. The VPN
could be on a 10 or 172 address, or it could be any address, really, as
long as it is reachable from your end.




>
> If you are really a birthday paradox worrier, put those key addresses on
> two addresses each and switch rules if you need to.


>
> -kb
> _______________________________________________
> Discuss mailing list
> Discuss at lists.blu.org
> https://lists.blu.org/mailman/listinfo/discuss
>