3 ms·
A public IP and DDNS can be impossible behind CGNAT. A VPN link to a VPS eliminates that problem.
by kevin_thibedeau 10mo ago
A public IP and DDNS can be impossible behind CGNAT. A VPN link to a VPS eliminates that problem.
- digiown 10mo agoThe VPS (using wg-easy or similar solutions) will be able to decrypt traffic as it has all the keys. I think most people self-hosting are not fine with big cloud eavesdropping on their data. Tailscale really is superior here if you use tailnet lock. Everything always stays encrypted, and fails over to their encrypted relays if direct connection is not possible for various reasons.
- hamandcheese 10mo agoWhen I said "you just need a single public IP" I figured it was clear that I wasn't claiming this works for people who don't have a public IP.