Gateways & VLANS

Two gateways

There are two gateways on the network:

1. caroline - exposed to the internet, provides access to internet and forwadsforwards connections to servers in SERVER VLAN
2. justine - VPN G/W that connects to Mullvad and terminates incoming WireGuard VPN connections

Clients use caroline as G/W for direct internet access and justine as G/W for Mullvad protected internet access. Additionally caroline runs DNS server that uses the ISP DNS server, while justine will use PiHole and Mullvad's DNS server.

Routing with two gateways

Things get very complicated with two gateways setup. Clients need to be able to direct traffic to correct gateway in response to connections coming from one or the other gateway.

Gateway forwarded connections:

1. caroline forwards from the internet to access internal network to:
   1. public SERVER network services from outside: blog, younohost etc.
   2. justine WireGuard VPN
2. justine forwards from internet VPN connected devices  to:
   1. HOME network
   2. private SERVER network services (not currently configured)