Android and Manjaro road warriors behind dynamic IP addresses/Carrier Grade NAT?

Markus Grundmann markus at
Sat Dec 29 13:53:06 CET 2018

Hi Renne,

for this reason I use a jump server based on SSH in the middle of the

no-port-forwarding,no-X11-forwarding,command="~/bin/poll .my-ip ; cat
~/.remote-ip" ssh-rsa AAAAB3N ...

After you have received the IP addresses you can use "wg" to set the new
endpoint address on both nodes. The small script named "/bin/poll" uses
the environment variables of SSH to wrote the current IP into a file.

Best regards,

On 29.12.18 13:16, Rene 'Renne' Bartsch, B.Sc. Informatics wrote:
> Hi,
> we have Android and Manjaro road warriors which are often behind
> internet sockets with dynamic IP addresses AND Carrier Grade NAT.
> Does anyone know a trick how to initiate a direct Wireguard connection
> between to road warriors without knowing their endpoint IP addresses/ports?
> Regards,
> Renne
> _______________________________________________
> WireGuard mailing list
> WireGuard at

More information about the WireGuard mailing list