DS-Lite Cable Internet & Wireguard Server

Router VPN, DNS, Leaks
1

Hi,

I bought two GL.iNet Opal routers to set up a Wireguard VPN server and VPN client so that I can work remotely while appearing to use my residential IP address.

Since I only have cable internet at home, the Opal router on the server side is connected behind my home router (Fritz!Box 6490 Cable).

After completing the VPN server configuration, I discovered that my home router does not receive a public IPv4 address. My ISP also does not provide a public IPv4 address (neither static nor dynamic) for cable internet connections.

After doing some research in this forum, I found a few possible workarounds:

  1. IPv6-only access
    This does not really apply to my case, as I may need to work from countries where IPv6 support is limited or unavailable.

  2. IPv4 access using more complex setups (e.g., VPS, Tailscale, etc.)
    I would appreciate some guidance on the safest and most reliable setup. My goal is to access my home network remotely while using my residential IP address.

If there are any other solutions or workarounds for the DS-Lite issue, I would be happy to hear about them.

Thank you in advance for your help.

2

If the IPv4 public network is not provided, and IPv6 may be restricted on the client side (no IPv6 address in some scenario), and services such as AstroWarp and Tailscale may consider to be used.

May I confirm did Fritz!Box not get the public IP?

4

Routing with Port Control Protocol (PCP) (check your isp if it support it )

5

With DS-Lite you should assume inbound IPv4 to the Fritz!Box is not possible. PCP is worth checking, but many cable ISPs will not offer useful PCP mappings on DS-Lite. For the most reliable setup: first ask the ISP for native dual stack / public IPv4. If they cannot provide it, run an outbound tunnel from the home side to a VPS or use Tailscale/AstroWarp. That solves access to the home network, but for internet egress the visible IPv4 will still be whatever your home DS-Lite provider uses (often shared CGNAT), not a dedicated IPv4 on the Opal.

1 Like