38 lines
713 B
Markdown
38 lines
713 B
Markdown
# VPN Topology
|
|
|
|
## Systems
|
|
|
|
### edge01
|
|
|
|
- Provider: DreamHost
|
|
- Role: Public VPS and WireGuard server
|
|
- Public address: 208.113.210.193
|
|
- WireGuard interface: wg0
|
|
|
|
### infra01
|
|
|
|
- Role: Home network WireGuard endpoint
|
|
- LAN address: 192.168.161.10
|
|
- Home gateway: 192.168.161.1
|
|
- WireGuard interface: wg0
|
|
|
|
## Traffic Flow
|
|
|
|
Internet client
|
|
|
|
|
v
|
|
edge01
|
|
|
|
|
| WireGuard tunnel
|
|
v
|
|
infra01
|
|
|
|
|
v
|
|
Home networks and selected internal services
|
|
|
|
## Design Notes
|
|
|
|
- infra01 initiates the tunnel because the home Internet connection does not require a static public IP.
|
|
- edge01 provides the stable public endpoint.
|
|
- Routing and firewall rules should expose only explicitly approved internal services.
|