Router with wireguard, route locally and via tunnel

Installing and Using OpenWrt
1

Folks
I just successfully made a wireguard connection from a phone to openwrt server with a public resolvable dyndns address.

When I travel, I will test from overseas hotel wireguard connection, taking my keys with me in my keepass.

Suppose, I am able to leave that router connected to an overseas network and now I want to appear to be in that overseas country. How can that be done? I made a picture (challenge being that at the overseas country we dont have a public IP address and may not be able to punch 51820 on the wan router.

Pls see the picture (i want to access overseas content when I am back to SFO.

2

Have two SSIDs/radios, one routed locally, one routed via WG ?

3

Is your intent to make the apparent IP address of the phone or the devices behind the 'server' to appear as if they're originating from India?

4

Yes. There are vernacular content that would be awesome to consume. As long as I appear to have logged in from India to that media streamer.

5

The question is which device needs to appear to be originating from India? Is it the phone while it is out and about? Or is it only when the phone (or another device) is connected to the network behind the 'server'?

6

Meaning make two vlans (one for lan and for wg0) and then allow wg0 traffic to go to lan if it came from NOT 10.10.1.1 and therefore any content from wireguard server side (10.10.1.1) will get routed to 10.10.1.2? How will it know that it should go to 10.10.1.2 and not 10.10.1.4?

7

Something like that, but if you only really need some sites to be routed through the tunnel, like streaming services, simply use PBR.

https://openwrt.org/docs/guide-user/network/routing/pbr

8

Technically it can be done with one tunnel but it is far easier to use two tunnels.

On the server in you current country setup the road-warrior setup so that you can connect with your phone to that server: https://openwrt.org/docs/guide-user/services/vpn/wireguard/road-warrior

Then next step is to make a second tunnel to connect this server with overseas.
Regarding the firewall setup both sides are setup as a server meaning opening port and opening the firewall for incoming traffic as you want to start the connection from overseas as that does not have a public wan ip address.