GNTECH Infrastructure Part 05: Home-to-Hetzner Connectivity with WireGuard
Route only required workload subnets and keep host recovery outside the tunnel.
Wireguard
WireGuard VPN on Proxmox — LXC Setup Guide for Homelab Remote Access
Deploy a lightweight WireGuard VPN server in a Proxmox LXC container — configure persistent tunnels, NAT routing, client generation, and firewall rules for secure remote access to your entire homelab network.
WireGuard Performance Tuning — Kernel sysctl and MTU Optimization
A practical guide to maximizing WireGuard throughput on Linux — covering kernel sysctl tuning, BBR congestion control, UDP buffer sizes, MTU/MSS clamping, NAPI polling optimization, and proper benchmarking with iperf3.
MikroTik WireGuard — Site-to-Site and Road Warrior VPN Setup
WireGuard on MikroTik RouterOS is production-ready as of RouterOS 7.x, and it’s dramatically simpler than IPsec or OpenVPN for homelab use. No certificate authorities, no confusing phase 1/phase 2 settings, no userspace daemon eating CPU — just a kernel module, a private key, and a peer config. This post covers two WireGuard topologies running on the same MikroTik router (R1 from the previous deployment post): Road Warrior — remote devices (phone, laptop) connect to the homelab Site-to-Site — two MikroTik routers connected across the internet Both share the same base config and coexist on the same router. ...