Скачать или смотреть Wireguard Nat-to-Nat (Hub and Spoke)

DISCLAIMER I SKIPPED A CRITICAL STEP
make sure you run this command to allow the HUB server to forward packets between clients
echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward

How to set up Nat to Nat connection in Wireguard (Hub and Spoke)
https://www.procustodibus.com/blog/20...

In this video, I troubleshoot and correct a few mistakes, so please don't follow along in real time! 😅

Steps
1. Set up Point-to-Point connection between each client and the Hub
Make sure UDP traffic is allowed into the Hub
Create Hub config
Create config for each Spoke
2. Set up Hub-and-Spoke connection between clients
Ensure the correct subnet is listed for AllowedIps
Enable PersistentKeepalive

A quick note: You don’t actually need to add persistent keepalive to the hub’s configuration—it’s not necessary and doesn't provide any added benefit in this setup.

Also, I didn’t cover updating WireGuard without resetting the config. To do that, simply run:
systemctl reload wg-quick@wg0

Thanks for watching, and I hope this helps!