11
How do I pass traffic on some port to a wireguard peer (lemmy.ml)
submitted 8 months ago by to c/linux@programming.dev
8 comments fedilink hide all child comments
 

So I have an http server on node A, and a VPS on node B. Both are connected through wireguard on a VPN which consists only of these two nodes. I'm trying to make all the requests that arrive on http/s on node B to be forwarded to A and processed there. Then of course the response must return to the original sender. I've seen a million ways to do it online and I'm hitting a brick wall so how would you do it properly on a fresh install (assuming my firewall, ufw in my case, is disabled. I'll figure it out once routing works as intended)

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 8 months ago* (last edited 8 months ago)

You need to rewrite the incoming dest IP address to be the IP of node B. The important part is to make sure the source IP is unaltered. On node B you then would need it to route outbound traffic threw Node A. If sounds really complicated it is because it is.

The easiest solution would be to setup a reverse proxy on Node A and have it forward traffic to Node B. Http has this cool header called X-forwarded-for which will automatically take care of routing.

  • permalink
  • fedilink
  • source
    •