Double VPN is it possible?

Started by ScottyD72, December 27, 2023, 09:12:10 PM

Previous topic - Next topic
I currently have Wireguard setup as my VPN into my network from the Internet.

I also have Wireguard setup to route all internal traffic out to NordVPN (NordLynx).

When I VPN into my internal network and do a leak test it knows my ISP address of my private network.  I would like for it to see me as using the NordVPN public address.

If I force the the inbound Wireguard to use NordVPN it won't rout any traffic out to the Internet.  I'm thinking that what I'm trying to accomplish is not possible and hoping there is a network expert who can tell if it is possible or not.  I don't want to be wasting time on something that is not possible.

Is this possible?
Client/Internet --> Private Network via Wireguard --> to Internet via NordVPN

All I'm trying to accomplish is limiting the amount of tracking that is done to my ISP static IP, which works great when I'm using a client connections internally.

I figured it out. It works as long as I use two different VPN protocols. 

Example: 
Client/Internet/OpenVPN --> Private Netowrk --> back to Internet via Wireguard (NordLynx)

The performance hit for OpenVPN is HUGE, so I may just live with my static ISP IP being expose when I tunnel into my private network.

I don't see why this shouldn't work with 2x WireGuard. Easiest solution might be configuring the NordVPN wg tunnel as your default gateway.
If you prefer policy-based routing instead, a PBR rule on the remote access wg interface should work just like on the LAN interface.

I've done crazier stuff with wg, like tunnel-in-tunnel.

Cheers
Maurice
OPNsense virtual machine images
OPNsense aarch64 firmware repository

Commercial support & engineering available. PM for details (en / de).