Create a VPN for home

Hello community,

I been reading about WiFi security and I think the best thing to do, it´s to have a VPN at home.
So the main question here, Does any one can share information about how to create a VPN for home?

Regards,
Abraham

There are several options for hosting a VPN at home, though it does have the requirement of being able to have a public IP address and that your connection is not through something called CG-NAT, or carrier grade NAT.

You can set up a Wireguard peer at home that can run on a machine running any flavor of Linux and set up a VPN tunnel on your Fedora system to connect to it. Other options would be Tailscale (or other variants like Headscale that are more overlay networks, but use Wireguard as their foundation.

Here are a couple of articles, forum posts and videos that might be of help:

1 Like

I had a OpenVPN server on Ubuntu years ago; I haven’t ran it since 2018 but I have notes here that could be useful to adapt with modern settings.

1 Like

In my case, I have a firewall appliance that runs pfSense and acts as my hub for Wireguard tunnels for my phone, laptop and cloud servers. Since I have a dynamic public IP address, I use a dynamic DNS provider that I can have a permanent hostname that gets updated when my public IP address changes. I point the Wireguard client to that hostname and connect as needed.

Before that, I tried PiVPN but found that it didn’t quite meet the firewall and routing needs that I had, but it’s definitely an option if you have a spare Raspberry Pi board available. Again, if your connection at home is behind CG-NAT, the only other option would be to host a Wireguard peer on a cloud provider as a hub, then have something at home connect to that, if you need access to stuff at home as well as having a more secure connection. It does ramp up the complexity of the setup and maintenance, though.

Thanks Linh,
I will read all the articles you kindly attached.

Cheers,
Abraham