149
submitted 6 days ago by myszka@lemmy.ml to c/selfhosted@lemmy.world

Wireguard is blocked in my country, so I no longer can use Tailscale or other Wireguard-based solutions. My home server is behind a NAT. What other ways of secure private connection can I use?

you are viewing a single comment's thread
view the rest of the comments
[-] hendrik@palaver.p3x.de 41 points 6 days ago* (last edited 6 days ago)

https://github.com/erebe/wstunnel seems like the obvious solution.

Or maybe OpenVPN over normal TLS on port 443.

You could try to run Wireguard on a different port which would be otherwise used by some very common service, maybe there's some general exemption for port 21, 22, 53, 80, 443...

[-] myszka@lemmy.ml 2 points 2 days ago

Wow, wstunnel seems to be a very elegant solution, thanks! However I still need to figure out how to get to my server behind a NAT

[-] shininghero@pawb.social 11 points 6 days ago

OpenVPN is my current method. Got it running on port 443 with user certificate authentication, and tls-crypt on top of that to completely mask the protocol from VPN detectors.

Also technically prevents DoS attacks, but that wasn't my primary goal.

[-] hoshikarakitaridia@lemmy.world 2 points 6 days ago

Does netbird run on wg on on ovpn as well? Maybe that's an option...

[-] hendrik@palaver.p3x.de 7 points 6 days ago

I'm not really an expert on VPN, but I believe solutions like Tailscale, Netbird, Pangolin all leverage the Wireguard protocol.

[-] FedX@quokk.au 4 points 6 days ago

Yeah, WG is by far the best way to do this kind of networking.

[-] Dojan@pawb.social 4 points 6 days ago

NetBird is Wireguard yes.

this post was submitted on 21 Aug 2026
149 points (99.3% liked)

Selfhosted

61752 readers
766 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS