obtuse stirrup
i currently have HA running with adguard home add-on working successfully for the local network.
my goal is to benefit from it also while on cellular data on my iphone. i know vpn is part of the solution somehow - i got the wireguard addon on HA and the app on my phone.
how do i connect the dots?
(bonus points for the issue of also being able to connect and control home assistant from the app remotely)
obtuse stirrup
1. VPN home
2. Set up the VPN to push AdGuard as the DNS server
3. Profit?
i think you overestimate my abilities sadly 😞
i’ve been on it for the last two days and it’s so not straightforward as it sounds for me for some reason
like each step break into so many inner steps that are not trivial to me
i’ll point some of the things i tackled/had problems with by now:
*the part about ddns
*the part about port forwarding (i think sgnat or smth prevents me idk)
*split tunneling the dns requests only?
abstract heron
Do you have a working VPN to home?
obtuse stirrup
i’m pretty sure not. (how do i confirm that?)
abstract heron
Launch the VPN client and try to connect
But if you're behind CGNAT Wireguard won't work
obtuse stirrup
i mean, i haven’t set a profile on the app yet because that requires configuring a host and port forwarding too - all of which gave me hard time
abstract heron
Are you behind CGNAT?
What are the first two sets of numbers for the WAN IP shown in your router's admin page?
obtuse stirrup
my verdict is that yes because i can’t port forward the needed port
obtuse stirrup
100.93
abstract heron
CGNAT
obtuse stirrup
can i ask how do you tell?
abstract heron
Experience 😉
The allocated address block is 100.64.0.0/10, i.e. IP addresses from 100.64.0.0 to 100.127.255.255.
Worked with networks for decades now
obtuse stirrup
damn i have so much to learn 😝
so knowing that, what are my options?
abstract heron
Tailscale
obtuse stirrup
the home assistant cloud is also relevant for my case or not?
abstract heron
Only for HA access
obtuse stirrup
i see.. and on the other hand, would tailscale allow the HA access part?
that mean, controlling HA, and not only using adguard
abstract heron
Yes
obtuse stirrup
i’ll check it out then. is split tunneling the dns request possible?
obtuse stirrup
well i’m probably not understanding it right - but i thought it’s a simple step to make sure only the dns requests and not the entire content will go through the vpn , thus not slowing down connection were i shouldn’t.
is it not the case?
abstract heron
Split DNS is about different answers depending on the client IP
If you want to use AdGuard then you don't want Split DNS
obtuse stirrup
ok so i had false notion of the thing, thanks for clarifying. So theoretically this VPN usage does slow me down or not really?