Wanted to help you potentially avoid a wild goose chase—port checking tools won’t detect a wireguard port as open…it’s specifically designed to not advertise its presence for security purposes. Bad handshake requests are ignored, making it look like a firewall DROP rule.

Zero issues (other than an IPv6 annoyance—see below) for me running a homelab with Google Fiber.

I switched from ATT Fiber because I really hated using their box (I bypassed it with an EAP proxy but it was brittle and it still had to be plugged in). Google Fiber doesn’t require that so you can plug your own router directly into the ONT.

I’ve had the same IPv4 address since I signed up, but IPv6 prefixes do seem to change every so often (which is baffling to me—seems like it’d be easier to leave the IPv6 prefixes alone vs keeping a static IPv4).