62
Cloudflare Tunnel? (lemmy.world)
submitted 1 year ago by to c/selfhosted@lemmy.world
45 comments fedilink hide all child comments
 

Just getting started with self hosting. I was wondering if anyone had experience with Cloudflare Tunnels for exposing their services to the internet. I like the simplicity and security it offers but don't love the idea of using Cloudflare. Like, I'm self hosting for a reason lol. Any tips would be greatly appreciated!

For context, I'm running all of my services in a very small k8s cluster and my priorities are mostly security then maintainability. Thanks yall!

EDIT: yall are great! Thank you so much for the replies. I'm going try my luck with pangolin but its good to know I have options.

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 1 year ago (6 children)

I'm using Pangolin, which is the current hotness. It's somewhat like cloud flare tunnels, but you need a VPS (find a cheap one). That tunnels back to your house. I opted into using crowdsec as another later. It's a part of their setup process.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 2 points 1 year ago (5 children)

    So what benefit does Pangolin actually provide then if you already have to provide the VPS? Routing back to your network from a VPS is trivially easy, it's getting the affordable VPS (given bandwidth prices) that's actually the sticking point of any solution.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 5 points 1 year ago (4 children)

    Over cloudflare, it's knowing you're the man in the middle and not some company. It has a few other things like zero trust, and an authentication layer.

    I use racknerd for VPS and it's about $35/year. So definitely one of the cheapest part of my home lab.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 1 year ago (2 children)

    The Racknerd $35/yr seems to be the 500MB RAM VPS with a 500GB/mo network data limit. That's probably sufficient power for a wireguard endpoint for ingress, but that's pretty low network data limit if you're putting a media server behind it (10GB/hr of video isn't unexpected, data is counted twice when having to ingress+egress thru the endpoint=25 hours of quality video per month)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    Use the their New Year deals and get 7000 gb monthly transfer with 3.5 GB RAM. Only $32.49/year

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •