you do split tunneling at the router level with pfsense  

 wireguard 

 i don't quite see the value of this... a static IP address on a cheap VPS with minimal capability but like 9tb traffic, in most parts of the world, can be had for like $3/month, i was running one via a service based in romania, and they have btcpayserver so you can even pay your bills with LN but their interface is a bit crap

then you get this tool: https://github.com/angristan/wireguard-install

assuming you are running ubuntu 20/22 on the VPS, and then run it to generate all the clients you need, for mobile phones it spits out a QR code you can scan

i couldn't live without wireguard at this point... all my internet presense appears there as well, my main dev machine, my bitcoin node, my spare laptop that runs windows, and my mobile all are on wireguard, everything goes through it 

 and er, yes, the addresses route with each other of course... that's how wss://r.mleku.com is running - off my dev box, when i've got it running, been running it a lot lately to test fixes with memory utilisation and getting some other users using it and posting to it as well 

 Layer 3 vs layer 5 or 7 is massively useful for running something at home. No fucking around in your shitty isp firewall needed. 

It’s pricey right now as he hasn’t benchmarked against fiat exchange rate, but this was relatively comparable @ $5/m when I first found it. 

This setup wg automagically & since key info is portable, it can be moved to a different machine simply. It pairs well with additional tooling, like a btcpay or start9 plugin - for the end user who is scared of the terminal. 

 well, people should stop being scared of terminals because $3/month is all it costs, plus a few hours reading and working

the absurd endless drama of ipv6 is probably never going to end because tptb don't really want us to be able to do full internet wide p2p so WG is a way to skate right past that and do it anyway 

 I will simply never use IPv6. I plan to buy a subnet this year. 

 buy a whole subnet? i presume you mean 256 addresses?

i agree though, IPV4 is actually addressable to 48 bits which is a huge amount, just requires some coordination at a p2p level

i *can* use ipv6 if i want to but it's just pointless if i want to work with p2p systems, because almost nobody has p2p running on ipv6! 

 Ya, /24 is all I can justify. Plenty to start with 

 Is there a reason ipv6 isn't used for p2p? I assumed it would be easier.