My current internet provider does not allow me to opt out of cgnat. So I don't have a public ip to connect to my home server from outside.

What is a good way to still connect to my home server?

Do I need to setup some VPN like headscale on cloudflare and use that to acces my network?

What if I want to host a website and make it availavle publicly?

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 4 days ago (3 children)

Do they allow you to ‘rent’ a static v4 address?
Do you have v6 available and configured?

I personally use WireGuard links to my home and VPS nodes, it’s a bit involved to setup, but you could do the same with Tailscale if you’re not up for the admin overhead.

As for hosting stuff for others to access, I’d put the advertised public interface on a VPS and locate it there, or tunnel it back to your home network if that’s not practical.

  • source
  • hideshow 3 child comments
  • [–] [S] 1 point 4 days ago (2 children)

    Apparently not. I think I really need to change provider.

    Would it be suitable to use a reverse proxy from cloudflare for the public access to a single port? Or would that still be insecure?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 4 days ago (1 child)

    I’ve always rolled my own, and I’ve never touched Cloudflare, but from what I understand of what they offer, it should be possible, and largely equivalent from a security perspective.

    I prefer to not be dependent on systems I don’t or can’t control or jettison, but that requires a level of commitment to continual vigilance and learning few can justify.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 2 points 4 days ago

    I'm with you on that. Prefer to host things myself. I was planning to setup wireguard, but because im behind CGNAT, I cant just use my server as the entrypoint for the VPN. I still need some proxy or server to tunnel into my home network.

    How do you configure yours? Do you just have a public ip that connects straight to your home server?

  • source
  • parent