# AlwaysRoute.com

> Stateless WireGuard WAN ↔ LAN zero-port routing architecture. Cross the gap without opening a single firewall port.

AlwaysRoute.com bridges roaming WAN peers (laptops, phones, remote workstations) directly into private LAN infrastructure through CGNAT and strict residential gateways using an outbound-initiated, stateless WireGuard cloud relay.

- **Name:** Ed Stuurman
- **Role:** Infrastructure & Reliability Engineer
- **Location:** Tokyo, Japan
- **Website:** https://www.alwaysroute.com
- **Related Projects:**
  - [HOME-LAB.net](https://www.home-lab.net): Split-Horizon Homelab Architecture & Private Proxmox VE Cockpit
  - [stuurman.com](https://www.stuurman.com): Engineering Articles, Architecture Blueprints & Field Notes
- **GitHub:** https://github.com/edstuurman
- **GitLab:** https://gitlab.com/edstuurman
- **LinkedIn:** https://www.linkedin.com/in/edstuurman/

## Architecture Pillars

1. **WAN Ingress (On-Demand Roaming):** Mobile and laptop peers automatically establish encrypted WireGuard handshakes the moment they leave trusted Wi-Fi.
2. **Harmonic Crossover (Stateless Edge Relay):** A lightweight cloud node bridges outbound-initiated LAN tunnels with roaming WAN peers—zero stored state or payloads at the edge.
3. **Private LAN Core (Zero Open WAN Ports):** Home and lab gateways drop all unsolicited inbound traffic unconditionally while split-horizon DNS resolves internal services natively.

## Core Pages

- [Home](https://www.alwaysroute.com/): Architecture overview and interactive WAN ↔ LAN WireGuard crossover diagram.