Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense as VPN Tunnel concentrator for LAN Gaming

    Scheduled Pinned Locked Moved OpenVPN
    9 Posts 3 Posters 3.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      merlinios
      last edited by

      Hello All,

      I want to ask a question about vpn tunnel for lan gaming. I have a pfSense installation in a remote location in a Datacenter. With some friends very often we are all get together in a house for lan partys. Is this possible to connect all to the remote pfsense i have with open vpn so some players that are remote can connect also to this vpn server and all play together LAN games ?

      Thanks

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        "With some friends very often we are all get together in a house for lan partys."

        You are all in the same house - why would you want to use a remote system to connect them?  They should already be on the same lan - using remote system to connect the systems via a vpn would just introduce a huge amount of latency – which is something you would not want on a lan game!!

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          As long as your games don't rely on broadcasts to locate the servers and are fully routeable it should work with a standard tun mode Remote Access OpenVPN.

          https://doc.pfsense.org/index.php/OpenVPN_Remote_Access_Server

          Won't the remote users be at a perceptible disadvantage?  I suppose you could put the game server on OPT1 and the local users on LAN and use a limiter to make the LAN users behave more like the remote users if that's an issue.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • M
            merlinios
            last edited by

            @johnpoz:

            "With some friends very often we are all get together in a house for lan partys."

            You are all in the same house - why would you want to use a remote system to connect them?  They should already be on the same lan - using remote system to connect the systems via a vpn would just introduce a huge amount of latency – which is something you would not want on a lan game!!

            You are right about that , the problem is how the remote users will connect to our game . A game that uses broadcast packets to host and join games. I have thought that if we connect to a central VPN Server both remote players will manage to connect to our game . I don't know if somehow the players that are in the same house can continue to use the wire connection so the latency will be small .

            Thanks

            1 Reply Last reply Reply Quote 0
            • M
              merlinios
              last edited by

              @Derelict:

              As long as your games don't rely on broadcasts to locate the servers and are fully routeable it should work with a standard tun mode Remote Access OpenVPN.

              https://doc.pfsense.org/index.php/OpenVPN_Remote_Access_Server

              Won't the remote users be at a perceptible disadvantage?  I suppose you could put the game server on OPT1 and the local users on LAN and use a limiter to make the LAN users behave more like the remote users if that's an issue.

              Unfortunately these games we play use broadcast packets for hosting and joining sessions.

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                It's possible to create what amounts to a bridge using tap mode.  I've never done it.  Maybe I'll have time to do it today.  It is not a recommended configuration.

                Are these all going to be configured as "Remote Access" users?

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • M
                  merlinios
                  last edited by

                  @Derelict:

                  It's possible to create what amounts to a bridge using tap mode.  I've never done it.  Maybe I'll have time to do it today.  It is not a recommended configuration.

                  Are these all going to be configured as "Remote Access" users?

                  Hi! .

                  Yes they all are going to be remote access users .

                  Thanks a lot !

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    I think most of what you need is here: https://forum.pfsense.org/index.php?topic=46984.0

                    I don't think you need the fix package any more.  That post is a couple years old.  I don't see it listed in available packages.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • M
                      merlinios
                      last edited by

                      @Derelict:

                      I think most of what you need is here: https://forum.pfsense.org/index.php?topic=46984.0

                      I don't think you need the fix package any more.  That post is a couple years old.  I don't see it listed in available packages.

                      Thanks !! I will try the guide!

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.