WireGuard behind CGNAT (VPS relay)

Many home internet connections use CGNAT: you do not get a real public IPv4. Port forwarding fails, so a home WireGuard server is unreachable from mobile data.

The usual fix

1. Rent a small VPS with a static public IP.
2. Run WireGuard on the VPS (or use it as a relay/hub).
3. Connect phone + home lab as peers to that hub.

Generate the hub/server and peer files with WireGuard Kit, then paste the VPS public IP into the endpoint field.

Why a VPS helps

• Stable public IPv4
• You can open UDP 51820 freely
• Works even when home ISP blocks inbound connections

Open the generator Get a VPS on Vultr