I would like to have a way of contacting my HomeLab without incurring a port on the internet, which in my case I have no control over. The idea is to put a WireGuard-Hub (using a Raspberry Pi) into a friend's network, with a port open to the outside, subject to dynamic dns. The dynamic dns would always point to the WireGuard-Hub's location. The WireGuard-Hub would be on it's own private vlan or be the DMZ host in the friend's network. The WireGuard-Hub would be the clearing house for WireGuard connections privately outside of anyone's network and connections would come to the WireGuard-Hub either through laptops/cellphones/tablet WireGuard encrypted connections or through a Breakout-Box in someone's network. The Breakout-Box would push a WireGuard connection to the WireGuard-Hub through the dynamic dns location and at the same time would be the connection to whatever network it was connected to. The idea is to have a cheap and quick connection between many networks and devices that is peer to peer and doesn't require an elaborate setup.