Bypass geo-restrictions without routing all traffic through the WireGuard server

Hello everyone

I have installed a WireGuard server on my OpenWRT router that I use to connect to my home. So far everything works very well.
My question is very simple;
Is it possible to use my WG server to connect from another country and do the geographic bypass but without routing all the traffic through the WG server in my home?
My goal is to use my WG server mainly for streaming services (Netflix, HBO, etc.) outside of my country and still get content from my country.

Until now I know this:
(client side)

Allowedips = 0.0.0.0/0

With this option I get the ip from the ISP of my country and the bypass works perfectly but all the traffic goes through the WG server. Which is what I would like to avoid.

Allowedips = 192.168.0.0/16

With this option I get the ip from the ISP of the country where I am, therefore the geographic bypass does not work. And as expected, only traffic going to/from 192.168.0.0/16 passes through the tunnel.

PBR, policy based routing?

1 Like

Can you please elaborate a little more?

1 Like

Answering purely to the question in the topic, the answer would be 'no'. Anything you want to appear to originate from elsewhere, would need to go through the wireguard tunnel.

However, as frollic pointed out, you may not actually need to have everything to originate from your tunnel endpoint. That's where (various forms of) policy based routing enters the picture, which allows you to create rule sets what should be routed one way or another. Be aware that this may end up in a rather complex set of rules, as barely any modern webservice is using only a single domain/ IP range to communicate with you, so you'd be effectively continuously playing whack-a-mole to stay on top of your rule set. It's possible, but not a turn-key solution - and especially media-/ streaming companies are quite actively working against you (and packet leaks, due to newly required or missing rules might not be quite that beneficial to your contractual status with them).