A home server gateway is safer on wired Ethernet than Wi-Fi
The setup uses a small as a personal gateway for Zrok tunnels and a , so local services can be reached from outside the home. The first design used Wi-Fi for the internet side and Ethernet for the local side, which made the device easy to move and place anywhere. Wi-Fi as the upstream connection has caused the most trouble because startup timing can break, the wireless link can be unstable, and the tunnel depends on whatever the is doing.
WireGuard runs on top of that connection, so weak or changing Wi-Fi directly lowers tunnel quality. The more stable direction is to feed the gateway with wired Ethernet instead. That could be done with a very thin fiber run and converters at both ends, or with a direct network cable.
Since the home router already handles the internet-facing WAN work, the gateway software can drop that role and become simpler.
Key points
- Wi-Fi upstream can fail because of startup timing and changing wireless conditions.
- WireGuard tunnel quality depends on the network underneath it.
- A wired Ethernet or fiber feed gives the gateway a steadier outside connection.
- If the home router already handles WAN duties, the gateway software can be simpler.
- For a , wired is the better default for .