Site to Site VPN, VPS to pfSense Wireguard

[NollipfSense]

So, I am wanting route VOIP (tls-5061 & SRTP) via VPN tunnel from VPS (DigitalOcean) to pfSense Wireguard to avoid the cg-nat issue. The sip provider will use TLS and I have a FQDN to resolve to the freePBX.

Do I need to use HAproxy and SSl offloading or I can just use DNS host override and let freePBX handles it? Will firewall rule routes the VPS public IP through the VPN?

[stephenw10]

You should just be able to route/forward the traffic. I wouldn't expect HAProxy to be helpful there.

[NollipfSense]

@stephenw10 Thanks Steve!