3 ms·

I'm not a huge fan of it, but, it seems like the way things are going is to simply run a service which is basically a large proxy. Your device connects out wit

I'm not a huge fan of it, but, it seems like the way things are going is to simply run a service which is basically a large proxy. Your device connects out with some kind of persistent connection to their central service then requests to your device go to their server, which does AAA and routes to your local device. Fixes the SSL issue, avoids any NAT headaches, enables fully remote access and most importantly for PMs it makes the device useless without your server-side components. If there is any local accessibility at all, it can be neutered or reduced. I don't entirely hate this model, its not my favorite, but, its the way things are going.

paledot 6y ago
I think this is the only practical answer, unfortunately. Everything else might possibly be made to work for a personal project, but definitely isn't an option at scale.
- AdamJacobMuller 6y ago
  The way plex does it works great at scale. It requires people to care more about "self hosted" than "PM says this will centralize user access and allow us to collect data and better monetize" I'm not knocking either model. They both work (technically) but you need to understand your market and what works better for them.
heavenlyblue 6y ago
I would be happy if my router supported letsencrypt. Why would I even bother copying and distributing self-signed certificates if I can just properly get a certificate for my own personal router? It’s idiotic that people still trust pure HTTP and have no option of switching.
- robocat 6y ago
  If your router needs configuring before it can access the Internet, then it can’t use certificates that require the internet to generate or validate. Or if you change ISP and need to change your router internet connection configuration, your router cannot be accessed.
  - heavenlyblue 6y ago
    When was the last time you needed to configure your router to access the internet? I understand if that router is something industrial, but then you can probably figure out how to do that over SSH anyway (which is secure).

paledot 6y ago

I think this is the only practical answer, unfortunately. Everything else might possibly be made to work for a personal project, but definitely isn't an option at scale.

AdamJacobMuller 6y ago
The way plex does it works great at scale. It requires people to care more about "self hosted" than "PM says this will centralize user access and allow us to collect data and better monetize" I'm not knocking either model. They both work (technically) but you need to understand your market and what works better for them.

heavenlyblue 6y ago

I would be happy if my router supported letsencrypt. Why would I even bother copying and distributing self-signed certificates if I can just properly get a certificate for my own personal router? It’s idiotic that people still trust pure HTTP and have no option of switching.

robocat 6y ago
If your router needs configuring before it can access the Internet, then it can’t use certificates that require the internet to generate or validate. Or if you change ISP and need to change your router internet connection configuration, your router cannot be accessed.
- heavenlyblue 6y ago
  When was the last time you needed to configure your router to access the internet? I understand if that router is something industrial, but then you can probably figure out how to do that over SSH anyway (which is secure).