Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Double VPN is it possible?
« previous
next »
Print
Pages: [
1
]
Author
Topic: Double VPN is it possible? (Read 1227 times)
ScottyD72
Newbie
Posts: 2
Karma: 0
Double VPN is it possible?
«
on:
December 27, 2023, 09:12:10 pm »
I currently have Wireguard setup as my VPN into my network from the Internet.
I also have Wireguard setup to route all internal traffic out to NordVPN (NordLynx).
When I VPN into my internal network and do a leak test it knows my ISP address of my private network. I would like for it to see me as using the NordVPN public address.
If I force the the inbound Wireguard to use NordVPN it won't rout any traffic out to the Internet. I'm thinking that what I'm trying to accomplish is not possible and hoping there is a network expert who can tell if it is possible or not. I don't want to be wasting time on something that is not possible.
Is this possible?
Client/Internet --> Private Network via Wireguard --> to Internet via NordVPN
All I'm trying to accomplish is limiting the amount of tracking that is done to my ISP static IP, which works great when I'm using a client connections internally.
Logged
ScottyD72
Newbie
Posts: 2
Karma: 0
Re: Double VPN is it possible?
«
Reply #1 on:
December 27, 2023, 10:15:34 pm »
I figured it out. It works as long as I use two different VPN protocols.
Example:
Client/Internet/
OpenVPN
--> Private Netowrk --> back to Internet via Wireguard (NordLynx)
The performance hit for OpenVPN is HUGE, so I may just live with my static ISP IP being expose when I tunnel into my private network.
Logged
Maurice
Hero Member
Posts: 1194
Karma: 152
Re: Double VPN is it possible?
«
Reply #2 on:
December 27, 2023, 11:00:17 pm »
I don't see why this shouldn't work with 2x WireGuard. Easiest solution might be configuring the NordVPN wg tunnel as your default gateway.
If you prefer policy-based routing instead, a PBR rule on the remote access wg interface should work just like on the LAN interface.
I've done crazier stuff with wg, like tunnel-in-tunnel.
Cheers
Maurice
Logged
OPNsense virtual machine images
OPNsense aarch64 firmware repository
Commercial support & engineering available. PM for details (en / de).
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Virtual private networks
»
Double VPN is it possible?