I want to achieve the following use case for my homelab: Access apps (Plex, Apache Superset, etc.) inside my home network from a public network. I can not use a DDNS service like DynDNS or DuckDNS since my fiber provider uses a form of CGNAT that doesn't allow port forwarding, so reaching out to a specific port from outside my network is not possible.

I want to have a scenario where I connect my home network Router (TP Link VPN Router) to AWS. When outside I want to be able to connect to the AWS service (which might be VPC VPN or Wireguard like service running on EC2) and then access my apps on home network.

What is the most effective way of doing this? I need it for a very limited time (1/2 hrs in a week) so if I can have a solution where the services can be started on demand from AWS and then shut down to achieve my purpose would be most ideal. Please help.

I have a wireguard docker instance running on EC2 instance. If I can leverage that to achieve the use case, that would be also useful.


  • I found something similar here - superuser.com/questions/1579924/… . Will try this tomorrow. If someone has a better solution using AWS VPC/VPN that can be started and stopped to reduce costs, that would be really helpful. Nov 15, 2021 at 18:57

1 Answer 1


There are different ways to do it. The simpler and cheaper way is to set up a VPN from AWS to your home router.

Here is the Official AWS documentation on how to up a VPN on AWS: https://docs.aws.amazon.com/vpn/latest/s2svpn/SetUpVPNConnections.html

  • I can not use this since there is no static IP option from my Carrier and they block all the ports so Dynamic DNS is also not an option. So I will not have an IP to access put on AWS VPN to reach my home router. Nov 15, 2021 at 18:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .