<![CDATA[Site to Site VPN, VPS to pfSense Wireguard]]>So, I am wanting route VOIP (tls-5061 & SRTP) via VPN tunnel from VPS (DigitalOcean) to pfSense Wireguard to avoid the cg-nat issue. The sip provider will use TLS and I have a FQDN to resolve to the freePBX.

Do I need to use HAproxy and SSl offloading or I can just use DNS host override and let freePBX handles it? Will firewall rule routes the VPS public IP through the VPN?

]]>https://forum.netgate.com/topic/180116/site-to-site-vpn-vps-to-pfsense-wireguardRSS for NodeSat, 13 Jun 2026 00:41:38 GMTMon, 15 May 2023 19:59:12 GMT60<![CDATA[Reply to Site to Site VPN, VPS to pfSense Wireguard on Tue, 16 May 2023 03:03:21 GMT]]>@stephenw10 Thanks Steve!

]]>https://forum.netgate.com/post/1104918https://forum.netgate.com/post/1104918Tue, 16 May 2023 03:03:21 GMT<![CDATA[Reply to Site to Site VPN, VPS to pfSense Wireguard on Mon, 15 May 2023 22:59:32 GMT]]>You should just be able to route/forward the traffic. I wouldn't expect HAProxy to be helpful there.

]]>https://forum.netgate.com/post/1104888https://forum.netgate.com/post/1104888Mon, 15 May 2023 22:59:32 GMT