Accessing self-hosted stuff behind ISP's CGNAT reddit / selfhosted ---------------------------------------------------------------------- chriscrutch · 2023-11-09 23:40 I think I already know the answer, but I'm relatively new to the whole self-hosting thing so I wanted to ask. I'm successfully self-hosting several things now, and just switched ISPs (went from DSL to fiber, very cool). My new ISP has me behind CGNAT or something similar, port forwarding and duckdns and the like that all used to work to access my homenet all no longer do. I called and asked them to get me off that. Only if I get a different plan at double the price. Oh, well. Not a huge deal to me, personally, I can still access everything important through Tailscale anyway. My wife, on the other hand, is pretty tech-phobic. She had access to Overseerr from her phone previously, and no longer does because of the ISP switch. I could put Tailscale on my wife's phone, but there's a couple issues there and she'd honestly hate it. Any alternatives that I can use for my tech-iffy wife to get around my ISP's irritating NAT? ---------------------------------------------------------------------- bz386 · 2023-11-09 23:51 Cloudflare Tunnels ---------------------------------------------------------------------- certuna · 2023-11-10 00:23 Tailscale/Zerotier yes. Other option is tunnel out to a 3rd party VPN server with port forwarding: cloudflare does that, and a number of others. ---------------------------------------------------------------------- bubbayo21 · 2023-11-10 00:41 VPs and then a tunnel in ---------------------------------------------------------------------- 12_nick_12 · 2023-11-10 00:52 I have a VPS with NGiNX and tailscale to get stuff thru a NAT. ---------------------------------------------------------------------- rickestrada · 2023-11-10 01:21 Cloud flare or VPS tunnels ---------------------------------------------------------------------- 5N4K3ii · 2023-11-10 04:26 Tailscale Funnels. Your wife doesn't need Tailscale on her device as long as what she needs to access is part of your Tailnet and you set up Funnels. https://tailscale.com/kb/1223/funnel/#:~:text=Tailscale%20Funnel%20is% 20a%20feature,don't%20have%20Tailscale%20themselves. ---------------------------------------------------------------------- chriscrutch · 2023-11-10 04:49 I probably missed something, as I said I'm relatively new to this stuff, but I tried the Tailscale Funnel and it seemed to be only able to serve static HTML and not an actual webapp. Looking at the link you provided, though, maybe I need to look into the reverse proxy part of it. ---------------------------------------------------------------------- chriscrutch · 2023-11-10 04:50 Thank you, I've signed up with cloudflare and I'm looking at setting that all up. It may end up being a little over my head, but I'll regard it as a learning opportunity. ---------------------------------------------------------------------- ceciltech · 2023-11-10 05:57 \> I could put Tailscale on my wife's phone, but there's a couple issues there and she'd honestly hate it. I am just looking into tailscale and wondering what those couple of issues would be? ---------------------------------------------------------------------- chriscrutch · 2023-11-10 06:17 Well for one thing it would put an extra icon in her status bar showing her as connected to a VPN. She'd hate that for a while until she got used to it. Also, this is just a personal thing because of the way I have my Tailnet set up, but her phone would use a Pihole at the house for DNS all the time if she was connected to Tailscale, which is not ideal for her, it's legitimately slower. I don't mind it and there are benefits, but all she'd notice is that it's slower. Additionally, I'm not sure if this is a bug in the latest Android version (I've never had this issue before and I've been running Tailscale for a while), but my phone is not reliably re-connecting to Tailscale automatically after a reboot lately. If hers for some reason didn't re-connect one day and she tried to get to Overseer and couldn't do it, she'd never know that it's because Tailscale didn't connect her, and she wouldn't want to be bothered to open the app and hit the switch. ---------------------------------------------------------------------- Klej177 · 2023-11-10 10:28 I am currently looking at same stuff like you do and trying to setup forward from my domain to my tailnet name