Hacker News new | ask | show | jobs
by wiradikusuma 3338 days ago
What's the advantage of using ngrok if I can just add entry to my own domain, say bla.anyofmydomain.com -> 123.123.123.123?
4 comments

Do you mean: "why can't I set up port forwarding on my firewall, then create a DNS record for my domain that points to my current IP, then wait for that to propagate around the internet before I can use it, then do it all again when I move from e.g. office->home or my IP changes because of my ISP"? No reason.
Man you'll be floored when you'll learn about this thing called dynamic DNS, and even better it's been around for 20 years ? more ?

Anyways my ISP has provided me with a fixed IP for about 17 years.

Man you'll be floored when you'll learn that 90% of people going online never have a "real IP". Servers see the IP of the NAT's most of the time. ngrok doesn't require an outside-accessible IP.
You're still going to need to set up port forwarding on the firewall of each site you develop at, and if you use DHCP with no static assignment... more fun. Honestly it depends on your use case, port forwarding and dyndns is trivial to configure, but if you're using development time to do it more than a few times then it's a non-trivial efficiency leak
It takes care of NAT/Firewalls, so you can sit on the airport if you wish and share something you work on locally. Even if it's your own home network, you'd have to go through the process of forwarding ports, have a static local and external IP, configure either a web server or a local proxy. I'm in no way affiliated to ngrok, I just think it's an awesome piece of software and use it regularly.
Are you sure about this being possible on airport provided networks ? My experience with airport networks is that pretty much everything is locked down and you can't set up anything from the airport.
It'll work from everywhere that allows an outbound connection. You're right there may be issues if you can't ssh out, but most airport networks I've been on has allowed ssh. It'd be a good idea for them to support tunnelling over SSL too, though.
ngrok's value is for services that don't have public IP addresses (anything behind a NAT or firewall)
Can IPv6 address help address this issue in some circumstances?
Certainly, although even with complete adoption of ipv6, i suspect we'll still see most networks locked down to prevent incoming connections
It will definitely be interesting to see how public internet providers (airports, coffee shops, etc) handle IPv6 in the future. Will they leave their LAN_IN firewall open and leave filtering to the client, or will we keep the status quo and filter at the router?
There are really nice features like a local request log, a replay button, a debugger, automatically good TLS, &c &c.