Wireguard VPN with failover ?

RouterOS General
1

Hi

I plan to use an RB760iGS hEX S to give streaming boxes VPN access at Internet (they need to appear to be in a different country than real one :wink:
I plan to use ProtonVPN system for it in Wireguard configuration (https://protonvpn.com/support/wireguard-mikrotik-routers/) but after reading documentation of ProtonVPN and Mikrotik one about Wireguard Iā€™m not sure if itā€™s possible and how to setup multiple VPN servers so if one fails or becomes unavalaible the router will try an other one till one is working !
Is it possible and if so how ?

Thanks

2

Netwatch the server as a first step.

If traffic passes through it, would be another question.

3

Not sure how you would do failover as this is not a WAN issueā€¦ but a wireguard switching issueā€¦which sounds more like heavy scripting ???
You need to really detaiil the requirement much more fully.
Is this one media box, and you dont care which country but any country/ISP other than your own OR
Do you have netflix accounts in several countries
ORā€¦
In other words, the more detail provided so an understanding can be gleaned will lead to better assistance. Too vague for now.

4

anav,

There is the whole ā€œplausible deniabilityā€ā€¦ I donā€™t want to know enough that I would have to testifyā€¦

5

Okay the OP should decribe it as.

Service 1A
Service 1B
Service 1C

to describe three diff instances of some companies service ( assuming he is paying for all three so whats the fuss :stuck_out_tongue_winking_eye: )

OR
Media1
Media2
Media3

to describe three different boxes, could be nvidiashield and two diff appleTV for all I care. We are just connecting the boxes to the net, no harm no foul LOL.

6

Hey guys

Really sorry for late answer but have been overbusy with work :frowning: So the problem is that one (as some are going into crazy thingsā€¦):

the idea is to use ProtonVPN service to go around geographical restrictions for stream services like Apple+/Amazonā€¦

I understand itā€™s not easy to get router to switch automatically at a different VPN server if the one in use is going down so for now Iā€™ll try to get it working with only one VPN server.

I have tried the tutorial of Proton to setup it but it doesnā€™t work (https://protonvpn.com/support/vpn-mikrotik-router/). When I implement the last steps for the kill switch I loose all accesses at router and itā€™s not working as VPN. As Iā€™m trying that on an hAP ac Lite, may it be a problem of the router having not enough hardware power to handle OpenVPN properly ?

Thanks for your help, advices,

VincĆØn

7

This guy uses express vpn because it gives him a block of five choices (with their vpn router option) one can easily choose on the fly for country.
HOwever its openvpn onlyā€¦

Read on from this link to see how he accomplishes thisā€¦
http://forum.mikrotik.com/t/can-not-access-the-ip-range-for-the-out-interface-in-my-wireguard-tunnel/164953/39

The wireguard is a distraction as its just to get remote access into his network and has nothing to do with his setup.
What he does is have two standard ISPs, they are only there to provide access for his open VPN (wrt router) connection.
He then uses another port on this openwrt router to act a a third wan connection for the MT router.
All his MT users then use the WRT VPN connection for internet and then they can use the various 5 country options for where they want to get their internet connection.

Not sure if that is what you want or notā€¦ but sounds like it.