Is it possible to create a droplet, use it as VPN and open Ports?

Heya,

You’re on the right track, but there are a few steps that might need tweaking to achieve what you want.

1. WireGuard and Port Forwarding:

• WireGuard Setup: WireGuard is essentially creating a secure tunnel between your local machine and the VPS. Traffic from your machine exits onto the internet from your VPS.
• Port Forwarding on the VPS: You need to ensure that the VPS is correctly forwarding traffic on specific ports to your local machine through the WireGuard tunnel.

2. Troubleshooting Steps:

1. Ensure Correct IP Routing:

   • Make sure your VPS is correctly routing the traffic back to your local machine over the WireGuard interface.

   • You should have something like this in your WireGuard configuration on the VPS:

[Peer]
PublicKey = <Your_Local_Machine_Public_Key>
AllowedIPs = <Your_Local_Machine_WG_IP>/32

• • On your local machine, the AllowedIPs setting should be set to 0.0.0.0/0 if you want all traffic to go through the VPS.

• Port Forwarding:

  • On the VPS, you’ll need to set up port forwarding rules using iptables or a similar firewall tool.

sudo iptables -A FORWARD -i wg0 -o eth0 -p tcp --syn --dport <port> -m conntrack --ctstate NEW -j ACCEPT
sudo iptables -A PREROUTING -t nat -i eth0 -p tcp --dport <port> -j DNAT --to-destination <Your_Local_Machine_WG_IP>:<port>
sudo iptables -A POSTROUTING -t nat -o wg0 -p tcp --dport <port> -d <Your_Local_Machine_WG_IP> -j MASQUERADE

• • Replace <port> with the specific port you’re trying to open and <Your_Local_Machine_WG_IP> with the WireGuard IP address of your local machine.

• Check Firewalls:

  • Ensure that both the VPS and your local machine’s firewalls allow traffic on the ports you want to open.
  • You can check if the ports are open by running telnet <VPS_IP> <port> from a different machine.

• Game and NAT Type:

  • Some games require specific ports to be open to achieve an “Open” NAT type.
  • Ensure that the game’s required ports are forwarded from the VPS to your local machine correctly.
  • Use online tools or network monitoring software to verify the traffic flow.