Been running a /28 behind a Contabo NAT VPS for my lab. Thinking of using it as reverse proxy to my home AS with a few prefixes I announce. Diagram below:
[Internet]
|
[Contabo NAT VPS] -- WireGuard tunnel -- [Home router, AS64512]
|
[Nginx proxy_pass]
My concern: exposing internal services through someone else's prefix. RFC 1918 is fine but RFC 6598 gets messy with CGNAT. Anyone done this with a real ASN?
ASCII art because why not:
+--------+ wg0 +--------+
| VPS |==============| HOME |
| 10.64 | 10.200.0 | 192.168|
+--------+ +--------+
AS must be real. No 64512 hobby stuff if you want peering that works.