4 ms·

I have a phone and laptop; those are my only two "mobile" devices that I might ever use to access my home network remotely. I set them up once, it took a few mi

I have a phone and laptop; those are my only two "mobile" devices that I might ever use to access my home network remotely. I set them up once, it took a few minutes, and I won't have to do it again unless I replace one of them. I can completely understand using Tailscale for enterprise networks, but it seems very overengineered for my personal VPN needs.

ddxv 6mo ago
How do you handle home network IP changes?
- andreasha 6mo ago
  Dynamic DNS
- lostlogin 6mo ago
  Not OP, but a static IP was about US$10 as a one off payment. It’s really nice.
- barelysapient 6mo ago
  Cloudflare tunnels
- genewitch 6mo ago
  i had this issue, with an even more wild set of restrictions, so i used Caddy to "output its own access log" and i had a cron job on any server at home that would hit that caddy server with a pre-defined key, so like `http://caddyserver.example.com/q?iamwebserver2j http://caddyserver.example.com/q?iamwebserver2j` for one server and "q?iamVOIP" for another. https://github.com/genewitch/opensource/blob/master/caddy_get-log.py https://github.com/genewitch/opensource/blob/master/caddy_ge... https://github.com/genewitch/opensource/blob/master/show_own_logs-Caddyfile https://github.com/genewitch/opensource/blob/master/show_own... And now i have bi-directional IP exposure. it's cute because you can't tell if you just drive by, it doesn't look like it does anything. you have to refresh to see your IP, which is a little obfuscation. if you care about security, not sure what to tell you. use port knocking. Please note: this doesn't require installing anything on any remote, just a cron job to curl a specific URL (arbitrary URL). I used it to find the IP to ssh on remote radio servers (like allstar, d-star) for maintenance, for example.
pkulak 6mo ago
Yeah, sure, that seems simple enough. I have a family of four. Plus a couple relatives who like having access to some of my self-hosted stuff. So, that's 6 people, each with at least one phone and one laptop, but probably an iPad too, or an extra work laptop, or something else random. Plus my youngest is addicted to buying old laptops on eBay and switching to them. You made me curious, so I looked it up: I have 17 machines. Yeah... I'm not going back to plain WireGuard. :D

ddxv 6mo ago

How do you handle home network IP changes?

andreasha 6mo ago
Dynamic DNS
lostlogin 6mo ago
Not OP, but a static IP was about US$10 as a one off payment. It’s really nice.
barelysapient 6mo ago
Cloudflare tunnels
genewitch 6mo ago
i had this issue, with an even more wild set of restrictions, so i used Caddy to "output its own access log" and i had a cron job on any server at home that would hit that caddy server with a pre-defined key, so like `http://caddyserver.example.com/q?iamwebserver2j http://caddyserver.example.com/q?iamwebserver2j` for one server and "q?iamVOIP" for another. https://github.com/genewitch/opensource/blob/master/caddy_get-log.py https://github.com/genewitch/opensource/blob/master/caddy_ge... https://github.com/genewitch/opensource/blob/master/show_own_logs-Caddyfile https://github.com/genewitch/opensource/blob/master/show_own... And now i have bi-directional IP exposure. it's cute because you can't tell if you just drive by, it doesn't look like it does anything. you have to refresh to see your IP, which is a little obfuscation. if you care about security, not sure what to tell you. use port knocking. Please note: this doesn't require installing anything on any remote, just a cron job to curl a specific URL (arbitrary URL). I used it to find the IP to ssh on remote radio servers (like allstar, d-star) for maintenance, for example.

pkulak 6mo ago

Yeah, sure, that seems simple enough. I have a family of four. Plus a couple relatives who like having access to some of my self-hosted stuff. So, that's 6 people, each with at least one phone and one laptop, but probably an iPad too, or an extra work laptop, or something else random. Plus my youngest is addicted to buying old laptops on eBay and switching to them. You made me curious, so I looked it up: I have 17 machines. Yeah... I'm not going back to plain WireGuard. :D