Advice on New Design

LCB

Greetings folks, new here. Have been reading for a couple days. I guess I'd just like a sanity check on my plans, opinions are welcome and appreciated:

I want to be able to VPN to home, from a variety of devices including iOS, Windows 10 devices, and maybe an Android or two. Expected concurrent connections will be 3 at most.

I'm on Google Fiber, as far as I know I have no traffic shaping or restrictions. In order to take advantage of all the free access points (TV boxes) I need to stick with the current router. While I can change the network in it's entirety, I cannot add internal routes to the router for additional internal networks.

I want to be able to (more safely) browse the Internet, access local (home) resources, and most of all be able to watch Google TV content while I travel which is only possible from the Google network. 😃

So my very first question seems like an important one to decide upon: Is it easier/more appropriate to use TUN rather than TAP? It seems that way, but being new to this I may be wrong. It looks like I'd have to be able to route my TAP network from the router back to the VPN server's interface in order for that to be effective and as I said I can't add routes.

Please be gentle ... 😉

Pippin

Yes TUN.
Server is behind NAT, if you cannot set route on gateway/router then have to masquerade on server.

LCB

Great, thank you Pippin.

Sometimes a guy just needs a sanity check once in a while. I tried so many different configs I just finally had to stop and ask myself "what am I trying to do?"