WireGuard Site-to-Site: From a Café Back into Your Home LAN

WireGuard wins on minimal config and near-native speed. RK3588 as the server makes a phone in a café feel like it’s plugged into your LAN.

RK3588
Rockchip
Industrial
Smart Device
Edge AI
Set-Top Box
NAS
SBC
Router
Android
ODM
Media Player
4K
Android 14

Three steps

Server: generate a keypair with wg genkey, open UDP 51820 and forward it;
Clients: one keypair per device with AllowedIPs=10.0.0.0/24 so only LAN traffic tunnels;
Remote sites: two RK3588/RT28 units as peers with PersistentKeepalive=25 to cross NAT.

On phones, route only the LAN prefix (split tunnel) — saves battery and doesn’t hijack everyday apps.

Related products: RK3588 Mini PC, RT28 industrial router. Datasheets, firmware and SDKs are free at the Hugsun Documentation Center; for selection advice or volume pricing, talk to us.