Routes & your home network

What a route does

A route identifies destination addresses that should enter the tunnel. In a WireGuard-style configuration, peer AllowedIPs supplies the relevant address ranges. Those ranges must agree with how the server is configured.

Changing the client’s routes alone does not make an unreachable server or home device reachable.

Full and selected routes

Example	Destination range
0.0.0.0/0	All IPv4 destination addresses
::/0	All IPv6 destination addresses
192.168.10.0/24	An example private IPv4 network

These are examples, not a configuration to copy into every profile. An IPv4 default route does not automatically create an IPv6 route. Only use ranges that your provider or network administrator intends the tunnel to carry.

Prepare remote home access

A VPN server on a router or another home device can provide remote access. Its endpoint must be reachable from outside the home. A changing public address, port forwarding or carrier-grade NAT may require additional setup.

The server also needs appropriate forwarding and return routes, and the destination device must allow the connection. WireFuse cannot configure those devices for you.

Avoid overlapping networks

The network where Apple TV is currently connected and the remote home network should not use conflicting address ranges. If both use the same private subnet, the intended route may be ambiguous.

Use the actual home-network range supplied by your administrator. Do not change an entire household network just to try an example from this page.

Verify a known destination

Disconnect before editing routes, save and reconnect. First check server verification, then try a known reachable home service at its direct address.

A VPN does not automatically carry all local discovery traffic. A service can be reachable by address without appearing in a discovery list. Streaming and other services can also have their own restrictions.

If names fail but direct addresses work, inspect DNS settings. If neither works, inspect the route, server forwarding and destination firewall with your administrator.