Virtual server issues

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Virtual server issues

zaschf

5 posts

Wannabe Geek
+1 received by user: 1

#295924 5-May-2022 21:00

Hello all,

up until a few days ago I had a very slow ADSL line but have now switched to 2Degrees wireless. Fantastic speed.

The modem router supplied by 2Degrees is a (Huawei now called SoyeaLink) B535-933.

The issue I have is that I'm running a small server from home and that was fine on the ADSL line but now, with the 2Degrees router/modem, the virtual server is no longer working.

I've filled in all the fields on the router but still no luck.

Now the interesting thing I discovered is that my modem WAN IP address is not the same as the one I can see on my DDNS provider.

Does 2Degrees have a router that is the real connection to the internet with all its customers behind it.

If that's the case it will be impossible to setup a virtual server on the 2Degrees network.

Does anyone has a bit more insight on this?

Regards,

Frits.

1 | 2

9185 posts

Uber Geek
+1 received by user: 4836

#2910678 5-May-2022 21:16

The very first thread in this forum covers this. https://www.geekzone.co.nz/forums.asp?forumid=85&topicid=291934

You have a CG-NAT address.

EDIT: and another from a couple of days ago https://www.geekzone.co.nz/forums.asp?forumid=85&topicid=295859

freitasm

BDFL - Memuneh
80647 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2910686 5-May-2022 21:29

From OP: wireless.

Is a static IP even an option on their wireless service?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

nztim

4012 posts

Uber Geek
+1 received by user: 2710

ID Verified

Trusted

TEAMnetwork

Subscriber

#2910692 5-May-2022 21:45

This is another example of not understanding the product your changing to before switching

Any views expressed on these forums are my own and don't necessarily reflect those of my employer.

zaschf

5 posts

Wannabe Geek
+1 received by user: 1

#2910749 6-May-2022 08:24

Thank you RunningMan.

The first link describes the issue and I will get in touch with 2Degrees for a fixed IP.

Linux

12178 posts

Uber Geek
+1 received by user: 8472

Trusted

Lifetime subscriber

#2910767 6-May-2022 09:19

zaschf:

Thank you RunningMan.

The first link describes the issue and I will get in touch with 2Degrees for a fixed IP.

@zaschf They may not do a static on FWA

simophin

20 posts

Geek
+1 received by user: 1

ID Verified

#2910768 6-May-2022 09:24

I don't know if this is what you after but I set up a free tier Oracle Computing Instance in Sydney, use SSH remote forward to redirect traffic from Oracle's public IP to my home server. Works like a charm.

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

MadEngineer

4591 posts

Uber Geek
+1 received by user: 2570

Trusted

#2910797 6-May-2022 11:05

How did you set it for Aussie? I can only select from five under North America

You're not on Atlantis anymore, Duncan Idaho.

simophin

20 posts

Geek
+1 received by user: 1

ID Verified

#2910803 6-May-2022 11:12

MadEngineer: How did you set it for Aussie? I can only select from five under North America

Lol did they close that already! I registered ages ago though.

freitasm

BDFL - Memuneh
80647 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2910805 6-May-2022 11:18

@simophin:

I don't know if this is what you after but I set up a free tier Oracle Computing Instance in Sydney, use SSH remote forward to redirect traffic from Oracle's public IP to my home server. Works like a charm.

Is your home server on a wireless connection?

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

simophin

20 posts

Geek
+1 received by user: 1

ID Verified

#2910808 6-May-2022 11:22

freitasm:
@simophin:

I don't know if this is what you after but I set up a free tier Oracle Computing Instance in Sydney, use SSH remote forward to redirect traffic from Oracle's public IP to my home server. Works like a charm.

Is your home server on a wireless connection?

No. I'm with skinny fibre and, even though being public accessible IP, it changes every time my router restarts. It annoys me and I also want to hide my real IP anyway.

freitasm

BDFL - Memuneh
80647 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2910871 6-May-2022 11:35

simophin:
freitasm:

@simophin:

I don't know if this is what you after but I set up a free tier Oracle Computing Instance in Sydney, use SSH remote forward to redirect traffic from Oracle's public IP to my home server. Works like a charm.

Is your home server on a wireless connection?

No. I'm with skinny fibre and, even though being public accessible IP, it changes every time my router restarts. It annoys me and I also want to hide my real IP anyway.

So your suggestion won't work in the OP's case. There's no way to forward the request to a connection behind the CGNAT.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

Mighty Ape

Shop now at Mighty Ape (affiliate link).

Peppery

919 posts

Ultimate Geek
+1 received by user: 188

Trusted

#2910900 6-May-2022 12:35

There's plenty of ways to make this work if you have a VM on the other side and are behind CG-NAT.

I'd personally use Tailscale or Zerotier on the VM and your home server. Both are really easy to setup, and then you can do a port forward on the VM (with iptables) to your internal server's Tailscale IP.

Alternatively, if you're cool with Cloudflare, you can set up a Cloudflare Tunnel on your home server which can expose your server to Cloudflare behind NAT.

simophin

20 posts

Geek
+1 received by user: 1

ID Verified

#2910948 6-May-2022 12:40

So your suggestion won't work in the OP's case. There's no way to forward the request to a connection behind the CGNAT.

Did I mention remote forward? You establish connection from home to the VM and the ssh does the port forwarding for you:

ssh -R 80:localhost:80 -R443:localhost:443 root@public_server -NC -g

Note you need to have gateway ports turned on on the server.

If you need UDP you will have to set up VPN but I find ssh so much easier if you only need to do TCP stuff.

Love zerotier too but I find the ssh method much faster, especially with the use of weak/hardware accelerated cipher for the https traffic.

NickMack

977 posts

Ultimate Geek
+1 received by user: 831

Trusted

In memoriam

Lifetime subscriber

#2910957 6-May-2022 12:46

freitasm: From OP: wireless.

Is a static IP even an option on their wireless service?

2degrees mobile network sits behind CGNAT as has been mentioned already in this thread, they do not offer static IP's (non-cgnat) to customers, so hosting services directly behind this service isn't a current option.

Nick

https://nick.mackechnie.co.nz | NZ ISP latency monitoring - https://smokeping.thenet.gen.nz

freitasm

BDFL - Memuneh
80647 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2910979 6-May-2022 13:16

NickMack:

freitasm: From OP: wireless.

Is a static IP even an option on their wireless service?

2degrees mobile network sits behind CGNAT as has been mentioned already in this thread, they do not offer static IP's (non-cgnat) to customers, so hosting services directly behind this service isn't a current option.

Nick

Thanks, that confirms it.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

1 | 2