Can I expose my server being behind double NAT of my ISP? reddit / selfhosted ---------------------------------------------------------------------- PanZWarzywniaka · 2023-10-02 18:24 Hi guys, I moved to the new flat and I believe that my ISP is keeping me behind double NAT. I am nooby in networking but I believe that the ISP shares one public IPv4 address across many flats. My public IP is diffrent from what my router thinks public IP is. Given that is it possible to expose my server to the public? I am away of ZeroTier solution but I'd like it to be public. Thank you ---------------------------------------------------------------------- MyTechAccount90210 · 2023-10-02 18:42 Best bet is a cloudflare tunnel. ---------------------------------------------------------------------- PanZWarzywniaka · 2023-10-02 18:52 >Best bet is a cloudflare tunnel. thank you will check it out ---------------------------------------------------------------------- EverytingDead666 · 2023-10-02 18:57 Or vps with vpn if your use case violates their Eula ---------------------------------------------------------------------- TinyMicron · 2023-10-02 21:41 Cloudflare Tunnels, Argo Access or Zero or whatever it's called these days :) there are alternatives as well like TailScale, Nebula, Netmaker, etc. ---------------------------------------------------------------------- vrgpy · 2023-10-02 22:53 You can get a free VPS from Oracle with a public IPv4, and you can use it as a reverse proxy to your servers. You will need to connect to it with a tunnel (encrypted or not). ---------------------------------------------------------------------- Uhhhhh55 · 2023-10-03 02:13 If your ISP offers IPv6, use that instead. ---------------------------------------------------------------------- jayge1991 · 2023-10-03 02:49 I 'could' use dyndns but honestly cloudflare tunnels make everything too easy (and you get filtering and authentication options if that's something you're interested in) I followed this guide for the most part: https://www.youtube.com/watch?v=ZvIdFs3M5ic&t=656s&pp=ygURY2xvdWRmbGFy ZSB0dW5uZWw%3D ---------------------------------------------------------------------- desmosquatch · 2023-10-03 05:22 I wonder if something like TwinGate would help in this case. ---------------------------------------------------------------------- JeremyMcFake · 2023-10-03 07:08 Cloudflare tunnels is easy and free to set up and will do this for you. ---------------------------------------------------------------------- lucassou · 2023-10-03 07:14 I've joined quite a few networks where IPv6 was not enabled ---------------------------------------------------------------------- jmwarren85 · 2023-10-03 07:33 If you’re hosting services for just family/friends, Tailscale would be a more secure solution. Opening up your server to the public is quite risky. ---------------------------------------------------------------------- PhilipLGriffiths88 · 2023-10-03 08:15 [https://github.com/anderspitman/awesome- tunneling](https://github.com/anderspitman/awesome-tunneling) for many more. Personally, I work on OpenZiti / zrok.io. ---------------------------------------------------------------------- ProffesionalAds · 2023-10-03 09:41 This! No need to expose port to the risk of internet. Tailscale or Netmaker are a perfect fit for non enterprise tasks. They are both freetier upto 20 devices ---------------------------------------------------------------------- Barentineaj · 2023-10-03 10:00 And with subnet routing, you can bypass that limit entirely :) ---------------------------------------------------------------------- krom_michael · 2023-10-03 13:43 1. Set up a free tier oracle VM with ARM cores. Architecture is important as x86 cores are limited to 48Mbit on free tier. 2. Install docker 3. Install Wireguard server 4. Connect router or devices to Wireguard server 5. Remeber to ppen appropriate ports on oracle dashboard. ---------------------------------------------------------------------- thaneekl · 2023-10-03 16:40 dyndns isn't a solution for double NAT sadly. only for dynamic IP address ---------------------------------------------------------------------- jayge1991 · 2023-10-03 19:56 That's where the cloudflare tunnel really shines. Since it's initiated as an outbound tunnel, you don't need to worry about NAT or public IP. All traffic will instead be forwarded through the tunnel and be pointed to a local IP address reachable by the tunnel connector. ---------------------------------------------------------------------- souam666 · 2023-10-03 20:05 Just he mindful that using cloudflare proxy and tunnel for caching media goes against their ToS and if you have a large volume of data transferred you may get flagged and banned