I've been running a full node for awhile, but I never could use my VPN (PIA) because I couldn't get incoming connections using it. Now I have a dedicated IP with them, still no luck getting incoming connections.
I have my router opened up and my rules set up in UFW, like I said I've been running a node for awhile with anywhere from 50-125 incoming connections. I just don't know how to make it work when using the VPN, dedicated IP address or otherwise. What's the secret?!
Thanks, Rusty
Bitcoin Core needs port 8333 open to the internet if you want inbound connections. When you run it through a VPN, most providers, including PIA, block inbound traffic entirely. Even if you pay for a dedicated IP, that alone does not guarantee peers can reach your node. That is why your setup works fine directly with your ISP but shows zero inbound peers when connected through the VPN.
If you want inbound connections while using a VPN, you must choose a provider that explicitly supports port forwarding. Once you have that, log in to your VPN dashboard, enable port forwarding, and make sure port 8333 is forwarded to your machine. On your system’s firewall or UFW rules, confirm that port 8333 is open, then restart your node. At that point, peers should be able to reach you through the VPN’s address.
If your VPN does not support port forwarding, then your node will still function, but only with outbound connections. That still contributes to the network, but not in the same way as a fully reachable node.
If your real goal is privacy rather than just using a VPN, it is often easier to run Bitcoin Core over Tor. Tor automatically gives your node a .onion address that peers can connect to, so you do not need to worry about dedicated IPs or forwarding rules at all.