4 ms·

I use cloudflare tunnels. No need to do anything to my router. I have 1 open publicly accessible port (80) exposed to the internet via Docker container. In orde

I use cloudflare tunnels. No need to do anything to my router. I have 1 open publicly accessible port (80) exposed to the internet via Docker container. In order to reach that port, you have to traverse the tunnel with TLS and my home IP is never exposed and always updated except to Cloudflare. Literally one command and few configs to set up on Cloudflare to proxy traffic to my localhost and various subdomains. You can have application level security enabled on Cloudflare's side for administrative interfaces, like portainer. That adds another level of security and there are a multitude of ways to verify (Email, token, one time pin, etc.). Super, super easy to set up. I am a dolt when it comes to networking and don't trust myself to make the correct configurations. I no longer pay for a VPS for my simple blog. I don't want to spend my time becoming an expert Sys Admin/Network Admin... so I chose to go with a tunnel.

71a54xd 4y ago
Any idea if you can "tunnel" to a proper public IP which is static? I recently did some digging and realized you can pay to get "reserved egress IP's" on cloudflare, curious if this would work for this?
- monkmartinez 4y ago
  I am not sure regarding that specific case. I can tell you this: You need a domain name with DNS setup to point at cloudflare for the tunnels to work. The domains can be at namecheap, DO, or anywhere where you can modify the DNS provider tags. At least one machine needs to run the tunneling service. I believe it should be the host that will serve the traffic.
- schwartzworld 4y ago
  Yes. I serve my websites from my home network over a reverse ssh connection to a vps. I only need the vps for it's static ip. Not that fast, but my sites are small. There are open source solutions for this as well.
  - 71a54xd 4y ago
    Interesting, are you just using a passthrough proxy like squid? I've encountered issues routing ssh connections through the proxy.

71a54xd 4y ago

Any idea if you can "tunnel" to a proper public IP which is static? I recently did some digging and realized you can pay to get "reserved egress IP's" on cloudflare, curious if this would work for this?

monkmartinez 4y ago
I am not sure regarding that specific case. I can tell you this: You need a domain name with DNS setup to point at cloudflare for the tunnels to work. The domains can be at namecheap, DO, or anywhere where you can modify the DNS provider tags. At least one machine needs to run the tunneling service. I believe it should be the host that will serve the traffic.
schwartzworld 4y ago
Yes. I serve my websites from my home network over a reverse ssh connection to a vps. I only need the vps for it's static ip. Not that fast, but my sites are small. There are open source solutions for this as well.
- 71a54xd 4y ago
  Interesting, are you just using a passthrough proxy like squid? I've encountered issues routing ssh connections through the proxy.