Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


gumdigger

429 posts

Ultimate Geek
+1 received by user: 3


#295753 20-Apr-2022 18:54
Send private message

I had a go at this and it hasn't worked in the first go, wondering if CGNAT complicate things?


Create new topic
Linux
12185 posts

Uber Geek
+1 received by user: 8479

Trusted
Lifetime subscriber

  #2904524 20-Apr-2022 19:07
Send private message

Request a static IP and test



freitasm
BDFL - Memuneh
80655 posts

Uber Geek
+1 received by user: 41053

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #2904538 20-Apr-2022 19:24
Send private message

What are you trying to achieve?




Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


prat33k
182 posts

Master Geek
+1 received by user: 31


  #2904548 20-Apr-2022 19:44
Send private message

As others have mentioned, public facing static IP is required to achieve this. Either you ask 2degrees or do something like this below to create an outbound connection from your local network.

 

 

 

I can suggest something like this which is also free - 

 

- Sign up for free tier on oracle cloud. You can then setup a free linux box with a public IP for free. (If you think the specs are too low for this free tier vm then I can suggest $5 vm on linode.com)

 

- Setup Reverse Proxy and wireguard.

 

- On your local network, setup wireguard to connect to the cloud vm. 

 

- Route the requests from your vm to your local network using proxy and wireguard. 

 

Most things would work using this method but can't say for sure as you haven't mentioned your purpose for this.

 

 




aseni
52 posts

Master Geek
+1 received by user: 32


  #2904668 21-Apr-2022 09:13
Send private message

gumdigger:

 

I had a go at this and it hasn't worked in the first go, wondering if CGNAT complicate things?

 

 

CGNAT won't allow incoming connections to your public IP address because it's shared with multiple customers.

 

You can use Cloudflare Tunnel or ngrok to get around this.

 

 

 

Forgot to mention this:

 

Alternatively, you can use the server IPv6 address as the origin for Cloudflare, but you will need to update the configuration every time the address changes (not sure how often it happens on 2D as I use static, but could get a bit annoying).


freitasm
BDFL - Memuneh
80655 posts

Uber Geek
+1 received by user: 41053

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #2904715 21-Apr-2022 09:16
Send private message

aseni:

 

gumdigger:

 

I had a go at this and it hasn't worked in the first go, wondering if CGNAT complicate things?

 

 

CGNAT won't allow incoming connections to your public IP address because it's shared with multiple customers.

 

You can use Cloudflare Tunnel or ngrok to get around this.

 

 

That's why I asked @gumdigger what they want to achieve. It's the first question we should be asking. I can imagine but we are not certain because of no reply yet. But if they want external access to an internal service, Cloudflare Tunnel is most likely the answer. And free.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


gumdigger

429 posts

Ultimate Geek
+1 received by user: 3


  #2904857 21-Apr-2022 14:20
Send private message

Hi All

 

solely for remote access to DVR WebUi, Heimdall etc. I use the free version of ngrok which works fine which is why I thought having a registered domain and standing up reverse proxy using PFsense+HA will work. 


 
 
 

Shop now on AliExpress (affiliate link).
aseni
52 posts

Master Geek
+1 received by user: 32


  #2904873 21-Apr-2022 15:11
Send private message

gumdigger:

 

solely for remote access to DVR WebUi, Heimdall etc. I use the free version of ngrok which works fine which is why I thought having a registered domain and standing up reverse proxy using PFsense+HA will work. 

 

 

ZeroTier might be a better option for you then, unless you REALLY need those publicly accessible on the Internet... 😬


gumdigger

429 posts

Ultimate Geek
+1 received by user: 3


  #2905032 21-Apr-2022 17:46
Send private message

are there any ngrok type solutions that allow you to use your own domain name, preferably free ? 


aseni
52 posts

Master Geek
+1 received by user: 32


  #2905033 21-Apr-2022 17:50
Send private message

gumdigger:

 

are there any ngrok type solutions that allow you to use your own domain name, preferably free ? 

 

 

Cloudflare Tunnel like I mentioned, just make sure you have proper security set up so your cameras don't end up on the Shodan.io gallery... 😅


michaelmurfy
meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator
ID Verified
Trusted
Lifetime subscriber

  #2905046 21-Apr-2022 18:46
Send private message

Cloudflare Tunnel + Cloudflare Zero Trust Access.

 

Basically you install a service on your Linux box and this creates a connection over to Cloudflare. It is free of charge also for your use-case. Cloudflare Zero Trust is a great product that allows you to secure hosted applications with auth - for example, I have Wordpress Admin on my site secured with Google Auth using this service.





Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.