My Pi-hole is handling my DHCP, and I have Tailscale set up for remote access.

But how to I set my devices (for example, phone outside of my LAN) to route as follows: device > Pi-hole > NordVPN? Is that even possible?

The end goal being to combine the benefits of Pi-hole with a paid VPN, regardless of location.

  • @[email protected]
    link
    fedilink
    69 months ago

    It is possible if you use pivpn (or any other VPN software) and double hop it to your pivpn provider.

    Device -> pivpn (uses pihole) -> mullvad -> internet

    I just get the wireguard configs from mullvad and edit them to properly work. Also works to get around device limits of the VPN.

  • @[email protected]
    link
    fedilink
    39 months ago

    Are you trying to route your DNS queries through your VPN device or all of your traffic?

    Just your DNS queries is easy, set up the VPN as the default route for the device (using netplan or iproute2), then all queries from PiHole will go via that.

    All traffic is a bit harder, unless your PiHole device is the only thing between your regular devices and the internet.

    • @LazerDickMcCheeseOP
      link
      29 months ago

      I’m trying to get all traffic through the Pi-hole and VPN. Do you mean more than setting the Pi-hole as the DHCP server?

      • @[email protected]
        link
        fedilink
        39 months ago

        Setting up the PiHole device as a DNS server & DHCP server still won’t make all traffic flow through it, you need it to be a gateway for all traffic that isn’t destined for an internal subnet.

        To do that, you’ll need to set up your device as a router, with the necessary entries in iproute2 and iptables in order to keep lock out external connections without conntracks. You might be able to route to a turnkey container of some kind.

        • @LazerDickMcCheeseOP
          link
          19 months ago

          Is there a good dummy-proof guide on setting that up? That sounds exactly like why I bought the Pi in the first place

    • @[email protected]
      link
      fedilink
      English
      19 months ago

      Would setting the pihole as the exit node work here if the pihole then routes all it’s traffic through the VPN? Or does that break things and/or add unnecessary complexity?