Home Cloud network setup reddit / selfhosted ---------------------------------------------------------------------- Thejeswar_Reddy · 2023-12-18 03:11 Hi All, I have a fair knowledge on networking as a System engineer myself and exploring more, the more I explore the more overwhelmed and confused with the options I am, can someone guide me here please, the following is my setup. Goal is all the devices should be accessible from outside the network, especially VMs as they'll be hosting dev-sites. OnPrem is setup with a Dell server and Esxi if you wanted to know. Thanks! https://preview.redd.it/odsef35qyy6c1.png?width=3476&format=png&auto=w ebp&s=e4061ac06af7d0fea1368a8fc9ea49f278faf48a ---------------------------------------------------------------------- adamshand · 2023-12-18 03:54 Personally I wouldn't use EC2 for homelab setups. It's really expensive and there's much better offers out there (I like Vultr). I'm not sure if I understand your general question, though. It sounds like you're going to have a VPS. You can do whatever you want here, setup services however you like and they will be accessible to the internet. I recommend using docker-compose.yml for deploying services and putting a reverse proxy in from of them to manage ssl certificates automatically (I like Caddy, but Nginx, Traefik are both good choices). Recently I've been playing with CapRover. It's very easy to install and has quite a few one-click-apps which makes it easy to deploy common open source packages (and it's pretty easy to add new ones). For making services publicly available from your home network there are a bunch of options. If you can port forward from the internet to a server on your network, that's the easiest thing. Again, setup a reverse proxy pointing to your services. Note that this exposes your home IP to the world, I don't personally care about that but some people do. If you are behind CGNAT or don't want to expose your IP than you need to proxy. The easiest way to do this is Tailscale, but then only people with Tailscale will be able to reach your services (which might be good or might be annoying). I'm behind CGNAT and I use Cloudflare Tunnels to expose home services to the internet. It works great and is very reliable. You can also use your VPS and a reverse proxy + VPN (WireGuard is good). ---------------------------------------------------------------------- Venusn99 · 2023-12-18 04:52 Is Tailscale is P2P like torrent?or ClientTailscale server server ---------------------------------------------------------------------- adamshand · 2023-12-18 07:32 You need a domain. Without a domain you can't get SSL certificates for any services you expose. I'm not sure if I'd call Tailscale P2P(?), but yes every client is connected to every other client. ---------------------------------------------------------------------- zfa · 2023-12-18 07:34 To answer your big red question: * If only you need access then you just either need any one of the VPN/mesh solutions you've outlined. I use WireGuard myself. * If you want stuff to be public then you want one of the proxy products on there - I use nginx myself. You can use both if you like (i.e. make a subet public and you access everything over VPN). And there's 'halfway house' solns like Tailscale which is a VPN, but you can kind of gift other users access. Only other thing is normally with this topology (whic his super-common by the way) is you need to settle on how to connect home network to the VPS as well. If you go down the WireGuard route (per first opiton above) then you just use the same here - i.e. you have WireGuard at home connecting to VPS so the VPS can route traffic back over that link. That VPS doesn't need to be very beefy at all btw. Just want decent network speeds there but CPU/RAM can be low low. ---------------------------------------------------------------------- Venusn99 · 2023-12-18 07:52 Can you share any document or reference which you have followed to install Tailscale. ---------------------------------------------------------------------- adamshand · 2023-12-18 08:12 https://tailscale.com/kb/installation