Static Routed /48 to OpenWRT under CGNAT via WireGuard

Otus9051

Just like the title suggests. I want a static routed v6 /48 to my home router via WireGuard.
Here are a few things I have thought:
1. Adding a static route as routing v6 to router wireguard v6
2. Just doing a NAT though I really don't want to do that.

Idea is to make something like Route48.

AuroraZero

Talk to @Cloudie before you attempt this endeavor

yoursunny

Since you have ASN, it's easy.

1. Announce the /48 from your BGP VM.
2. Make WireGuard tunnel from your home router to the BGP VM.
   • BGP VM side: set AllowedIPs= to be the /48.
   • Home router side: set AllowedIPs=::/0 .

Otus9051

@yoursunny said:
Since you have ASN, it's easy.

1. Announce the /48 from your BGP VM.
2. Make WireGuard tunnel from your home router to the BGP VM.
   • BGP VM side: set AllowedIPs= to be the /48.
   • Home router side: set AllowedIPs=::/0 .

Do I add the IP to the wg0 dev or my ens3 dev?

yoursunny

@Otus9051 said:
Do I add the IP to the wg0 dev or my ens3 dev?

Neither side needs any address on the WireGuard interface or WAN interface.
You would need one address from your prefix on the LAN interface of the home router.
You can assign other addresses within the subnet to your LAN devices.

terrorgen

@yoursunny said:

@Otus9051 said:
Do I add the IP to the wg0 dev or my ens3 dev?

Neither side needs any address on the WireGuard interface or WAN interface.
You would need one address from your prefix on the LAN interface of the home router.
You can assign other addresses within the subnet to your LAN devices.

This is the way

Otus9051

@yoursunny said:

@Otus9051 said:
Do I add the IP to the wg0 dev or my ens3 dev?

Neither side needs any address on the WireGuard interface or WAN interface.
You would need one address from your prefix on the LAN interface of the home router.
You can assign other addresses within the subnet to your LAN devices.

Can I just then follow my guide on running Wireguard on OpenWRT (which I wrote for R48)

Otus9051

@Otus9051 said:

@yoursunny said:

@Otus9051 said:
Do I add the IP to the wg0 dev or my ens3 dev?

Neither side needs any address on the WireGuard interface or WAN interface.
You would need one address from your prefix on the LAN interface of the home router.
You can assign other addresses within the subnet to your LAN devices.

Can I just then follow my guide on running Wireguard on OpenWRT (which I wrote for R48)

Apparently not, ugh.

Otus9051

Managed to kill/OOM my Vultr, ugh.