infrastructure/vpn/topology.md

VPN Topology

Systems

edge01

• Provider: DreamHost
• Role: Public VPS and WireGuard server
• Public address: 208.113.210.193
• WireGuard interface: wg0

infra01

• Role: Home network WireGuard endpoint
• LAN address: 192.168.161.10
• Home gateway: 192.168.161.1
• WireGuard interface: wg0

Traffic Flow

Internet client | v edge01 | | WireGuard tunnel v infra01 | v Home networks and selected internal services

Design Notes

• infra01 initiates the tunnel because the home Internet connection does not require a static public IP.
• edge01 provides the stable public endpoint.
• Routing and firewall rules should expose only explicitly approved internal services.