ISP doesn't allow port forwarding, what should I do? reddit / selfhosted ---------------------------------------------------------------------- Projonmo112 · 2023-10-15 20:04 Not sure if this is the right subreddit, ISP uses CGNAT which restricts me from hosting a server. I want to play Tom Clancy's Ghost Recon with my friend but my NAT type is STRICT which doesn't allow me to play with him since his NAT type is also strict. I've seen in online that I need to open my ports for the game to be able to change the NAT type to OPEN. Any FREE solutions that I can use to somehow change my Strict NAT Type to Open? ---------------------------------------------------------------------- drasked · 2023-10-15 20:19 I would give ZeroTier a try. ---------------------------------------------------------------------- CeeMX · 2023-10-15 20:25 Tailscale ---------------------------------------------------------------------- UnusefulCoder · 2023-10-15 21:20 You can use ngrok or [localtonet](https://localtonet.com/). Look for tutorials on yt ---------------------------------------------------------------------- patman240 · 2023-10-15 21:36 Cloudflare tunnel ---------------------------------------------------------------------- fifteengetsyoutwenty · 2023-10-15 22:11 I use cloudflare tunnels. And cry a little when a new gui powered proxy is released with a handy docker compose. ---------------------------------------------------------------------- esturniolo · 2023-10-15 22:17 You should [avoid this](https://postimg.cc/qtRngnKZ) ---------------------------------------------------------------------- tricky-oooooo · 2023-10-15 22:38 You could try [https://github.com/rapiz1/rathole](https://github.com/r apiz1/rathole), but you'll need a small VPS (virtual private server). You can get them for as cheap as 1$ per month. ---------------------------------------------------------------------- Danny-117 · 2023-10-15 22:49 Does your isp support ipv6, if they do maybe try setting it up and it may help. ---------------------------------------------------------------------- YaneonY · 2023-10-15 23:17 Wireguard ---------------------------------------------------------------------- gentoorax · 2023-10-15 23:34 My ISP were like this but you can pay extra for a static ip (v4) maybe an option? ---------------------------------------------------------------------- PaulEngineer-89 · 2023-10-15 23:35 Run Tailscale. You will both be on the same “network” (virtual). ---------------------------------------------------------------------- CeeMX · 2023-10-15 23:35 Under the hood it’s the same, Tailscale is based on Wireguard. It’s just easier to setup when you have NAT on both endpoints ---------------------------------------------------------------------- PaulEngineer-89 · 2023-10-15 23:51 The key as I posted earlier is that if neither one can be called externally you need an external server/gatewsy to coordinate with. Tailscale provides this plus handles the details. ---------------------------------------------------------------------- NetMan46 · 2023-10-16 00:31 But not easier than Zerotier 🤗 ---------------------------------------------------------------------- CeeMX · 2023-10-16 00:44 I used both, they are pretty much on par when it comes to ease of use :) ---------------------------------------------------------------------- chicknfly · 2023-10-16 00:53 Oracle free tier, no? ---------------------------------------------------------------------- Oujii · 2023-10-16 01:16 Wireguard alone doesn’t solve this issue. ---------------------------------------------------------------------- Oujii · 2023-10-16 01:16 They are pretty easy, it’s just really a matter of preference. ---------------------------------------------------------------------- pm_something_u_love · 2023-10-16 02:10 Ring your ISP and be asked to put on a public IP. If you don't necessarily need static it probably won't even cost you anything. ---------------------------------------------------------------------- michaelpaoli · 2023-10-16 04:41 Got IPv6? ---------------------------------------------------------------------- Myrenic · 2023-10-16 05:35 I use cloudflare tunnels and nginx proxy manager at the same time. Just point the tunnel to the NPM proxy :) ---------------------------------------------------------------------- TheoSunny · 2023-10-16 06:19 Time to sidebar a "Awesome selfhosting bypass CGNAT" guide. ---------------------------------------------------------------------- [deleted] · 2023-10-16 06:39 [deleted] ---------------------------------------------------------------------- jerwong · 2023-10-16 06:39 You might be able to use STUN if it supports it. That's usually how we deal with NAT breaking VoIP. Other than that, this is the one use case that I would recommend using a Cloudflare tunnel. You can either place the game system on a real IP with a firewall in front, or you can terminate it onto a router and NAT with it. ---------------------------------------------------------------------- Projonmo112 · 2023-10-16 07:40 My bad, I really haven't posted that much before so I thought I can post the same thing on multiple subreddits without disturbing others, I will try to avoid this issue in the future! ---------------------------------------------------------------------- Pale_Medicine_5716 · 2023-10-16 07:51 Overlay network is a solution. Tailscale (has selfhosted option), zerotier or Cloudflare tunnel ---------------------------------------------------------------------- Lankiness8244 · 2023-10-16 08:25 You can try cosmos. Cosmos Support cgnat ---------------------------------------------------------------------- ProffesionalAds · 2023-10-16 08:38 This! I will throw in [Netmaker](https://www.netmaker.io/) just to add on the list of decent overlay networks for OP to consider. ---------------------------------------------------------------------- SecurityOnSteroids · 2023-10-16 08:52 I would honestly avoid it. Many people got their VPSs nuked without any notice from Oracle and lost their data. ---------------------------------------------------------------------- xkcd__386 · 2023-10-16 10:06 on the principle that one should always avoid anything branded Oracle, yes :) but otherwise, in this case, there's no actual data to lose -- he'll just be using it as a relay for data worst case he's back to where he is today ---------------------------------------------------------------------- fifteengetsyoutwenty · 2023-10-16 11:07 What’s the point of using both? ---------------------------------------------------------------------- Myrenic · 2023-10-16 11:39 When I'm at home, I prefer to directly route my internal traffic to NPM rather than going through the Cloudflare tunnel using DNS overwrites. However, if I happen to be away from home, then I'll just rely on the tunnel. ---------------------------------------------------------------------- Projonmo112 · 2023-10-16 12:31 TAILSCALE worked, thank you everyone! <3 ---------------------------------------------------------------------- Myrenic · 2023-10-16 12:32 This also allows me to not port forward anything, I guess this adds another layer of security. ---------------------------------------------------------------------- ProbablePenguin · 2023-10-16 13:42 Backups. ---------------------------------------------------------------------- junialter · 2023-10-16 19:33 Contact the game developer and why tf they still not using #IPv6. It's 2023... ---------------------------------------------------------------------- phein4242 · 2023-10-16 19:39 Get a vps on some open network. Setup a vpn tunnel with that, and route your internet traffic over it. ---------------------------------------------------------------------- BadGroundbreaking243 · 2023-10-16 19:59 Tailscale, zero-tier, cloudflare tunnel (may or may not work)