Is there a way to peer 2 devices at a distance without joining the broader ygg network?

[FishyBusinessYT]

I've been looking into yggdrasil as a way to circumvent limiting ISP infrastructure, but online resources are limited as far as I've been able to find, and after tinkering for a couple hours I still can't seem to get both of my devices to peer without using multicast discovery.

I don't deeply understand how this all works under the hood, so I'm not sure if what I'm asking for is at all possible. Just in case this is an XY problem, here's what I'm trying to do and why I'm attempting to accomplish all of it this way:

• Have 2 devices: A server, A, exposing several services like ssh and file storage, and a laptop, B, that uses these services.
• Keep security high as to not compromise any of these devices (that's why I'd like to avoid joining the broader network, but a proper firewall and auth setup could also do, in theory).
• Be able to access A from B even with all the NAT nonsense. A is as of now inaccessible on the internet, which is what I'm trying to fix.
• Be able to roam around while still having access to A from B and B only.

Am I missing anything? I couldn't tell if this had been answered before, so I apologize for any potential inconveniences. I greatly appreciate your time.

[FishyBusinessYT]

I've been reading on, and it seems like my current setup (joining the public network and setting up firewalls carefully) is the only way to achieve this kind of remote access.

I'm leaving this discussion open in case someone more qualified than myself can point me in the right direction or, on the contrary, confirm it's impossible to create this setup without joining the public network.

Thanks for your time.

[doosom]

As long as your node A is not accessible from the internet you will have to use a third party node which can "bridge" you from B to A.

My Yggdrasil setup is not connected to the public network either. There's one central node that acts as a central bridge but certainly this one needs to be accessible from everywhere. Peering is limited by using AllowedPublicKeys in the yggdrasil.conf to ensure that only preferred nodes can connect.

[FishyBusinessYT]

Oh, thank you very much. That makes perfect sense.

[neilalexander]

We’re actually investigating functionality to allow peering to the wider network but only allowing traffic between your own nodes. Will update soon.