5 ms·
Your home has publicly accessible^1 IP address Or you are using a third party-controlled server with direct internet access to make home IP accessible 1. No I
by 3xblah 7y ago
Your home has publicly accessible^1 IP address
Or you are using a third party-controlled server with direct internet access to make home IP accessible
1. No ISP firewall blocking unsolicited incoming traffic
Do you configure WG to use persistent keepalives
- ronnier 7y agoI have a public IP.
- 3xblah 7y agoA previous thread about WG had some discussion about obtaining a publicly reachable^1 IP address. No doubt many readers are interested Can you tell us anything about how you obtained one 1. No ISP firewall blocking unsolicited incoming traffic
- ronnier 7y agoI think it's pretty common in the US with the various providers. You get a public IP. I didn't do anything special for that.
- deleted 7y ago[deleted]
- zenhack 7y agoYeah, I don't think I've ever encountered an ISP in the US that didn't give you a public IP. Maybe they exist? You only get one, so you typically NAT everything, port 25 is blocked and often port 80 is as well, but that's about it.
- EvanAnderson 7y agoCome to rural western Ohio, where the only non-dial-up options, in some places, are super-high latency satellite and a local "WISP" who NATs their whole Customer base into what appears to be a /29 (your "public" IP assigned by their CPE lands in 10.0.0.0/8).
- dboreham 7y agoNAT and double-NAT are common in WISP networks. Also of course most hotels, Starbucks, schools, conferences, airplanes, albeit those are not ISP services. And cellular carriers often NAT.
- deleted 7y ago[deleted]
- plapetomain 7y agoAlmost every ISP will have a firewall of some kind, but in the US this is usually just blocking 25 incoming, sometimes 80 (fios), maybe a few other ports. I have run services on port 443 on Optimum and FiOS for years. IP addresses don’t change frequently. Usually what happens is there will be some maintenance and you’ll end up with a new IP because you lost the lease in the interim. If you keep your equipment on though you can have the same reachable IP address for years. I use a dynamic DNS service so this is rarely a big deal. Not sure why this is so hard for you to grasp. You keep arguing, for what reason?
- 3xblah 7y ago"I have run services on port 443 on Optimum and FIOS for years." What is Optimum, FIOS. WG does not work over TCP. Try running a UDP-only DNS server from home on some random port. If you know the port can you reach it via UDP from the internet. A TCP service listening on port 443 on an ISP customer's IP address in the US might be reachable from the internet. However, this topic is neither TCP nor port 443 nor is it restricted to just the US.
- plapetomain 7y agoOptimum and Fios are two isps in the US. > Try running a UDP-only DNS server from home on some random port. No reason to run DNS. However, I run openvpn udp between three houses (fios, Comcast, cablevision) for nearly 15 years. It’s pretty common, works fine. Again in the US... cable, fiber and dsl internet service comes with a public mostly unfiltered IPv4 address, the address is dynamic but in practice it is extremely stable. End of story. No idea why you’re acting like such an imbecilic tool in this thread. The whole time I have mentioned that this is the case for major US “landline” ISPs. Yes there are plenty of counterexamples, not sure what point you’re trying to prove.
- 3xblah 7y ago"No reason to run DNS." Hmmm, it was a yes or no question. Are you suggesting it work would if you did.
- braindeath 7y agoIn the US for home connections (cable, fiber, DSL) everybody gets an accessible IP address pretty much -- the worst is that some ports are blocked like port 80 or 25. Phones don't get a dedicated IPv4.
- RL_Quine 7y agoFor most people it's dynamic. Mine is dynamic with the PPPoE fibre session.
- CrazyStat 7y agoDynamic in theory, but for many people the IP is unchanged for a long time. I remember reading an article that said the average length of time between dynamic IP changes tracked by some company was something like seven months, though I can't find it now. I have cable with a theoretically dynamic DNS but it's changed once in >4 years.
- 3xblah 7y agoCan you be sure that during 4yrs it never changed >1 even for a short time, maybe hours or days, then reverted back
- 3xblah 7y ago"This means you can use it to create inbound network tunnels to computers that don't have a public IP, are behind firewalls or get assigned new IPs frequently." Sure enough, look what appears on HN front page a few hours later... https://news.ycombinator.com/item?id=22167627 https://news.ycombinator.com/item?id=22167627 People's home public IP addresses are not universally reachable/accessible^1 from the internet. It varies. What does "reachable/accessible" mean. It means that transferring a file would be as easy as person A typing something like nc -lnp [port] [person A home IP adddress] < file and person B typing nc -w1 -vvn [person A home IP address] [port] > file where port is not one that is blocked, e.g., 80, 25, etc. and is known by both persons. Regardless of what anyone says in an HN comment, in the real world, people at home are sometimes behind firewalls, or other software that performs NAT, that are running on computers that do not belong to them and are not under their control. That's why WG has persistent keepalives. No one answered that question.