When you say “tested by connecting locally”, I am assuming perhaps incorrectly that you are testing this with the Beryl connected to your home router running the OpenVPN server. This isn’t a good test, I think. By default OpenVPN binds to all the interfaces, so it is listing on your LAN interface as well as on the WAN interface. Testing it that way is fine for testing certificates, etc., I think, but not for actual use. It is quite dependent on how your router is implementing loopback.

Better would be to go to the local library, or connect the beryl to a cell hotspot/tether so it is clear you are reaching the server from the WAN side.

1 Like