Hacker News new | ask | show | jobs
by bhaney 686 days ago
Call me crazy, but I don't think "tunnel all your traffic through a third party corporation's service" is the correct solution to "my IP changes sometimes." Maybe just set up DDNS instead?

If you really are trying to run a server behind a CGNAT, then I guess you have no other options, but I'd consider this kind of thing to be a last resort.
2 comments
shadeslayer 686 days ago
Not quite, some ISPs lock down their routers and you can't expose the relevant ports publically. That's when Cloudflare Tunnels combined with a reverse proxy save the day.

Another really useful service is being able to protect everything behind a SSO like Github, allowing at least the most basic form of intrusion prevention that would secure your homelab from the majority of attacks.

link
znpy 686 days ago
> Not quite, some ISPs lock down their routers and you can't expose the relevant ports publically.

Here in Italy our public Communications Regulatory Authority (AGCOM) has sentenced that ISPs cannot mandate a specific router type and MUST provide technical details so that any subscriber can be able to use a modem/router of choice. This was after quite a bit of lobbying by the "Free Modem Alliance (https://www.freemodemalliance.it/)

So I guess that at the end of the day i guess it's mostly a matter of political activism.

I love this, and run my own WRT3200ACM with OpenWRT

link
Saris 686 days ago
CGNAT is pretty common unfortunately and sure makes things harder.
link