OpenVPN on port 443 would be my guess. Just regular nat or carrier grade nat.
this post was submitted on 21 Aug 2026
152 points (99.4% liked)
Selfhosted
62004 readers
1143 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
If you get a Mikrotik router it comes with a back to home VPN server and a dedicated DDNS.
You need to know a bit about network configuration, although the setup wizard is sufficient for most use cases.
When you enable to BTH VPN, it does all of the configuration for you. And it works for me behind a double NAT
I believe the back to home VPN from MikroTik is also wireguard. At least it is on mine. No idea if you can use a different VPN solution with it.
Does amnezia work? Its obfuscated wireguard and is, according to their github, resistant to deep packet inspection and such
Run ssh on an Onion Service.
Based on what you planning to do, maybe mTLS could be a solution.
Can you port forward on the router?
Not really, but I wouldn't directly expose my server anyways
Sure, but they shouldn't.
Why? wireguard doesn't respond if the keys are wrong.
WireGuard doesn't work at all because it is blocked in OP's country. OP wants an alternative. Dumping all security and encryption is certainly an alternative, but I am certain that this is counter to what OP is trying accomplish, given their initial choice of Tailscale (WireGuard on steroids).
I'll recommend this new VPN thing :
Its new so its evolving quickly with weekly releases and nightly builds.
Lots of people have told me about their grievance list due to AI having a big part in the development. It's a bunch of guys in the team, so there's the human element there.
As for my opinion, it's the only VPN I've managed to get working on my own.
I lost connection yesterday and I am not sure what happened but my home computer and my phone were on the same VPN constantly for a week. Jumping from the house WiFi to 5g didn't break the VPN connection but it did take a few seconds the first time I did it.
My other option would be Tailscale.
Update on the lost connection. I had restarted my computer and that changed my firewall device name for the VPN. So it was not rayfish related. It's been pretty steady since.
Looks promising, but the ai part throws me off too. But I'll give it a try
load more comments
(2 replies)