@MR.S 

Thank you so much for your help! It's a lot clearer now. It should work pretty much the same on Docker and on the Pi. I hope TP-link will just implement the NAT loopback for the VPN properly. One of the reasons I bought the router.

  @improbablecat 

I'm not sure but I think there was a post about NAT loopback on Omada routers here on the forum, but I can't find it again, but if I remember correctly I think TP-Link has removed this option intentionally, so it will probably also be removed on the ER8411 in the next upgrade. but it doesn't mean much to me since I use OpenVPN on a Pi.

Yes, I found a post about this here

https://community.tp-link.com/en/business/forum/topic/665990?replyId=1365562

  @MR.S 

Thanks for sending the post. That sucks. I think having HomeAssistant running is a very valid use case for wanting to have a constant connection. Since you don't want to have to turn it on again everytime you leave the house. Same goes for local cameras. Kind of a miss what they decided here in my opinion. Cause HA and cameras are the main reason I wanted the VPN router in the first place.

  @improbablecat 

yes I use VPN on my phone to access my camera server and to use NextDNS all the time on mobile devices. I can't afford to turn VPN on and off when I'm out of the house, but the solution I have now works very well without me being dependent on what TP-Link does with the software and firmware on the equipment.

  @MR.S 

I have no doubt it works great! Part of why I chose Omada is so I don't have to set everything up myself haha. They should honestly just add this. I think they can't decide for customers what they "will not" use. This is a very legit use case.