# how to add external private services to a wireguard network

**URL:** <https://community.fly.io/t/how-to-add-external-private-services-to-a-wireguard-network/726>\
**Category:** General\
**Created:** [February 9, 2021, 7:47am UTC](https://community.fly.io/t/how-to-add-external-private-services-to-a-wireguard-network/726 "2021-02-09T07:47:16Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jens](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/jens/32/193_2.png) [@Jens](https://community.fly.io/u/Jens)\
**Post date:** [February 9, 2021, 7:47am UTC](https://community.fly.io/t/how-to-add-external-private-services-to-a-wireguard-network/726/1 "2021-02-09T07:47:16Z")

</div>

Is there a good way to add a private service, e.g. on a laptop or in a private cloud to an existing wireguard network? The desired end-result is that I can add any service I want to a private network with a dns entry available to other members of this network over a secure connection. I could imagine running one or more tunnel daemons inside fly and the corresponding tunnel clients outside to reverse proxy the traffic. The tunnel client could then expose itself on the internal network with the internal domain name. However, this sounds a bit complicated so maybe you have better ideas on how to do this.

---

<div class="post-metadata">

**Author:** ![michael](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/michael/32/16_2.png) [@michael](https://community.fly.io/u/michael)\
**Post date:** [February 9, 2021, 4:17pm UTC](https://community.fly.io/t/how-to-add-external-private-services-to-a-wireguard-network/726/2 "2021-02-09T16:17:09Z")

</div>

Does this guide do what you need? [Private Networking · Fly](https://fly.io/docs/reference/privatenetwork/#private-network-vpn)

---

<div class="post-metadata">

**Author:** ![Jens](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/jens/32/193_2.png) [@Jens](https://community.fly.io/u/Jens)\
**Post date:** [February 9, 2021, 6:59pm UTC](https://community.fly.io/t/how-to-add-external-private-services-to-a-wireguard-network/726/3 "2021-02-09T18:59:37Z")

</div>

Almost. I think, Kurt said that wireguard connections are not possible when I use a custom network. I have to use a custom network to isolate tenants. Is there a way to use wireguard peering with custom networks?

---

<div class="post-metadata">

**Author:** ![thomas](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/thomas/32/40188_2.png) [@thomas](https://community.fly.io/u/thomas)\
**Post date:** [February 9, 2021, 7:34pm UTC](https://community.fly.io/t/how-to-add-external-private-services-to-a-wireguard-network/726/4 "2021-02-09T19:34:48Z")

</div>

Hey, I asked a question on the other thread:

> [@Multi tenant applications](https://community.fly.io/t/multi-tenant-applications/375/14):
>
> Hey, Jens, can I bug you to say a bit more about what the architecture you’re thinking about is? What needs to be shared between the (isolated, per-your-customer) networks you’d be creating? Do we need to be able to peer between networks? Is that all-or-nothing or does it need to be configurable? We’re noodling about this on Slack right now, is why I’m asking.

(I’ll read any reply in either place).

Depending on what you’re looking for this might be an easy change I can roll out in a couple of days, or a more involved project.