Hello everyone.
I’m new here so sorry if this should not be posted into /General/. If it’s problem just tell me where should i post and i’ll repost it there.
Now to my question. I have a working WireGuard VPN set up on my MikroTik router. It works just as it should but only on my LAN. What would be the best way to make it accessible from anywhere? Since I have a public and static ip address i can probably forward a port or would it be better to use something like dynamic dns or something completely different?
I’ll be awaiting your answers. Thank you in advance.
You just have to make your Wireguard server reachable from wherever it is you want to connect from. If the Mikrotik is not your Internet gateway, then this involves port forwarding; if it is then that doesn’t have to be done. The default firewall blocks incoming connections, so you’ll probably have to adjust that.
If you have a static public IP, you are free to just use your IP address. You may of course use any dyndns platform if you prefer that. Mikrotiks include one, it’s in the IP->Cloud settings and named DDNS, probably this is the quickest to set up (you have to check exactly one checkbox.)
Mikrotiks (only ARM and ARM64 architectures) have a so-called Back-to-home (BTH) VPN feature that’s really just a hand-holdy way of configuring Wireguard. (They also provide a relay service for when you don’t have a public IP address, but you obviously don’t need that.) If you’ve already set up wg to work for you internally, you probably don’t need this.
Your request is not clear.
Do you host a wireguard server on your router or are you connecting to a 3rd party server for example.
What are the use cases for wireguard, who uses it and for what purposes.