WireGuard site-to-site setup

Site-to-site means two LANs (home + office, or lab + cloud) route between each other through WireGuard peers.

High-level steps

1. Give each side a unique VPN address (for example 10.66.66.1 and 10.66.66.2).
2. Set AllowedIPs to include the remote LAN CIDRs (not only the peer tunnel IP).
3. Enable IP forwarding on both gateways.
4. Use a VPS hub if either side lacks a public IP (see CGNAT relay).

Start from generated peers in WireGuard Kit, then edit AllowedIPs for LAN ranges.

Open the generator Get a VPS on Vultr