undefined | Better HN

0 pointscaconym_1y ago0 comments

+1. I have Wireguard set up on all my mobile devices and configured to automatically start when connecting to any wifi that isn't mine, so I can take my devices anywhere and I'm still on my home LAN. It works seamlessly and flawlessly.

I self-host a lot of services, and without Wireguard (or equivalent), remote access just wouldn't be realistic.

0 comments

14 comments · 3 top-level

Arch-TK1y ago· 9 in thread

How did you automate it to start on networks which are not yours?

This is like the only piece of the puzzle for me.

thequux1y ago

Set the AllowedIPs wireguard setting (and/or the route, if you can set that separately) to one larger than your home network (i.e., if your home network is 192.168.1.0/24, use 192.168.0.0/23). Then, block wireguard packets from the internal network on your router. Then the tunnel will always be running; it just won't be used when you're at home because there's a more specific route

Arch-TK1y ago

But this will also break whenever there's any more specific route, no?

Arch-TK1y ago

To answer my own question, looks like there's WG Tunnel[0] on android which does what I need.

[0]: https://play.google.com/store/apps/details?id=com.zaneschepk...

runjake1y ago

For the Tailscale app on Apple platforms it’s called VPN On Demand. Here's how you can configure it.

https://tailscale.com/kb/1291/ios-vpn-on-demand

Arch-TK1y ago

Tailscale is built on wireguard but it is not just wireguard. I want a wireguard only solution.

1 more reply

sph1y ago

Does it still eat your battery? It used to, and it was so annoying I moved to Nebula

caconym_OP1y ago

All my regular mobile devices are Apple, so whoever said that has it right. I also have a Linux laptop but NetworkManager support for Wireguard was broken last I checked, and at the time I didn't care enough to set it up by hand.

mcpeepants1y ago

This is a built-in feature of the Wireguard app on iOS, not sure about other platforms.

george_perez1y ago

And specifically it's based on VPN On Demand. https://developer.apple.com/documentation/networkextension/v...

thepill1y ago· 2 in thread

On Android devices? If so: how? :)

viraptor1y ago

I don't use it with wireguard, but Zerotier works just fine on Android.

Jarwain1y ago

As does tailscale!

2 more replies

burnt-resistor1y ago

I have wg into home and wg into an aws instance. All my mobile and laptops can reach them.

j / k navigate · click thread line to collapse

0 comments

14 comments · 3 top-level

Arch-TK1y ago· 9 in thread

How did you automate it to start on networks which are not yours?

This is like the only piece of the puzzle for me.

thequux1y ago

Arch-TK1y ago

But this will also break whenever there's any more specific route, no?

Arch-TK1y ago

To answer my own question, looks like there's WG Tunnel[0] on android which does what I need.

[0]: https://play.google.com/store/apps/details?id=com.zaneschepk...

runjake1y ago

For the Tailscale app on Apple platforms it’s called VPN On Demand. Here's how you can configure it.

https://tailscale.com/kb/1291/ios-vpn-on-demand

Arch-TK1y ago

Tailscale is built on wireguard but it is not just wireguard. I want a wireguard only solution.

1 more reply

sph1y ago

Does it still eat your battery? It used to, and it was so annoying I moved to Nebula

caconym_OP1y ago

mcpeepants1y ago

This is a built-in feature of the Wireguard app on iOS, not sure about other platforms.

george_perez1y ago

And specifically it's based on VPN On Demand. https://developer.apple.com/documentation/networkextension/v...

thepill1y ago· 2 in thread

On Android devices? If so: how? :)

viraptor1y ago

I don't use it with wireguard, but Zerotier works just fine on Android.

Jarwain1y ago

As does tailscale!

2 more replies

burnt-resistor1y ago

I have wg into home and wg into an aws instance. All my mobile and laptops can reach them.

j / k navigate · click thread line to collapse