New apartment Internet has no port forwarding, admin login

Submitted ⁨⁨6⁩ ⁨months⁩ ago⁩ by ⁨johnnixon@lemmy.world⁩ to ⁨selfhosted@lemmy.world⁩

Pro: 1Gb upload and download speeds on free Internet provided by the HOA. Con: As a self hoster, I have zero control over it. No port forwarding, no DMZ, no bridge mode. It’s Starbucks free WiFi with a wired connection.

Option A: Buy Google Fiber and don’t use free Internet. Option B: Create some elaborate tunnel through a VPS.

My public self hosted activities are fairly low bandwidth (password manager, SSH). I have a vague idea that I could point my domain to a low cost VPS that has a VPN tunnel into my home network for any incoming connection needs. That may require me to fill in port forwards on both systems but whatever. Tailscale is serving most of my remote needs but I still need a few ports. This does not fix the issue of online gaming port forwards (Nintendo Switch online requires a huge forwarded range for best performance) but oh well for now.

source

Comments

Sort:hotnew top

InEnduringGrowStrong@sh.itjust.works ⁨6⁩ ⁨months⁩ ago
Haven’t had to use port forwarding for gaming in like 30 or so years, so I just looked up Nintendo’s website…

Within the port range, enter the starting port and the ending port to forward. For the Nintendo Switch console, this is port 1024 through 65535

LMAO, no thanks, that’s not happening.

For your question, you could likely route everything through a tunnel and manage the port forwarding on the other end of the tunnel.

source
- MaggiWuerze@feddit.de ⁨6⁩ ⁨months⁩ ago
  Why not also remove the password from my wifi while im at it?
  
  source
  - Clusterfck@lemmy.sdf.org ⁨6⁩ ⁨months⁩ ago
    Relax guys. It’s a Nintendo Switch, those things never get hacked.
    
    source
- jjlinux@lemmy.ml ⁨6⁩ ⁨months⁩ ago
  WTF? Nintendo wants you to get that wide open? 🤣
  
  source
  - johnnixon@lemmy.world ⁨6⁩ ⁨months⁩ ago
    I actually gave it 44000-65535 and it’s connecting well. That’s another reason why I wanted a more robust network: IOT VLAN to segregate that risk.
    
    source
    -> View More Comments
MangoPenguin@lemmy.blahaj.zone ⁨6⁩ ⁨months⁩ ago
It’s not self-hosted, but Tailscale funnels are also an option.

source
- dogsnest@lemmy.world ⁨6⁩ ⁨months⁩ ago
  What this guy says.
  
  I have a cheap (yet decent) vps with racknerd (3GB KVM $28/year), so Tailscale + tunnels, and bob’s your uncle.
  
  source
- Im_old@lemmy.world ⁨6⁩ ⁨months⁩ ago
  You can selfhost it on a vps with headscale
  
  source
  - AbidanYre@lemmy.world ⁨6⁩ ⁨months⁩ ago
    I don’t think headscale supports funnels.
    
    source
    -> View More Comments
Decronym@lemmy.decronym.xyz ⁨6⁩ ⁨months⁩ ago
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters

HTTP Hypertext Transfer Protocol, the Web

IP Internet Protocol

VPS Virtual Private Server (opposed to shared hosting)

nginx Popular HTTP server

[Thread #843 for this sub, first seen 2nd Jul 2024, 12:15] [FAQ] [Full list] [Contact] [Source code]

source
MigratingtoLemmy@lemmy.world ⁨6⁩ ⁨months⁩ ago
Option A modified: get a router, install OpenWRT, install wireguard, get a VPS, create a tunnel, profit

source
- Im_old@lemmy.world ⁨6⁩ ⁨months⁩ ago
  Or with opnsense as well
  
  source
  - MigratingtoLemmy@lemmy.world ⁨6⁩ ⁨months⁩ ago
    Yeah any FOSS OS that can do a router
    
    source
SteveTech@programming.dev ⁨6⁩ ⁨months⁩ ago
If the HOA’s router supports UPnP/NAT-PMP/PCP then you might be able to use that to get some ports forwarded.

source
- johnnixon@lemmy.world ⁨6⁩ ⁨months⁩ ago
  The setup is very strange. They don’t provide a router. They took the old phone lines going to each unit (which appears to have been done in Cat5 decades ago) and put an RJ-45 end on it. That plugs into a POE powered wireless access point with two more ports on it. Plugging my laptop in, the gateway does not respond to HTTP requests. The tech who installed it said I have to call the home office to change my wireless password. I got them to disable the wireless so I could put my router on the other end but I’m either running on a network that my shady small time ISP has full control over or I’m behind a double NAT. Speeds were 900+ up and down though.
  
  I might see if I can get the AP re-enabled and let the switch connect to it directly if that even fixes the Switch’s NAT issues.
  
  source
  - Fuzzy_Red_Panda@lemm.ee ⁨6⁩ ⁨months⁩ ago
    Sorry you have to deal with this. I know it wasn’t in your list of options, but you could attend HOA meetings, bring up the internet issue and see if they’ll change the current setup, or you could get elected to an HOA board and start pulling the strings of change. That’s more of a long-term goal though.
    
    source
    -> View More Comments
  - ASeriesOfPoorChoices@lemmy.world ⁨6⁩ ⁨months⁩ ago
    I think you need to find out what kind of connection you actually have. I mean, it’s unlikely you’ve got a dedicated ethernet cable to the ISP.
    
    Where does that ethernet line actually go?
    
    Have you run some basic traceroutes, at least?
    
    source
    -> View More Comments
chronicledmonocle@lemmy.world ⁨6⁩ ⁨months⁩ ago
If there providing IPv6 to you, port forwarding shouldn’t be necessary most of the time for online gaming.

Are they allowing UPnP upstream?

source
- zer0squar3d@lemmy.dbzer0.com ⁨6⁩ ⁨months⁩ ago
  This. 100% this. Ipv6 underrated.
  
  source
- vividspecter@lemm.ee ⁨6⁩ ⁨months⁩ ago
  Assuming the Switch supports ipv6, and given how backward Nintendo’s tech tends to be, it wouldn’t surprise me if they didn’t.
  
  Although at least nintendo.com has an AAAA record.
  
  source
poVoq@slrpnk.net ⁨6⁩ ⁨months⁩ ago
github.com/fatedier/frp seems to be designed for such cases, but I have not tried it myself.

source
- semi@lemmy.ml ⁨6⁩ ⁨months⁩ ago
  I have been using it for the last 3 months to expose services from my home internet (plex, wireguard, etc.) and I’m pretty happy with it. It’s relatively simple to set up, I haven’t had any outages so far, and it’s nice that it supports UDP port forwarding as well as TCP (for wireguard).
  
  source
bruhduh@lemmy.world ⁨6⁩ ⁨months⁩ ago
Option b of course, rent cheapest vps, ionos.ca offers plans for 2$ per month, it’ll be cheaper than Google fiber, you can also use sshuttle github.com/sshuttle/sshuttle on your openwrt router and connect everything to it be it by cable or wireless, then Nintendo gaming will also have that port forwarding because your whole traffic is going to go through vps

source
Abba@monyet.cc ⁨6⁩ ⁨months⁩ ago
I have personally gone the VPN route with wireguard. Right now I have it setup so that all of my servers connect to my wireguard server on the VPS. Then I simply either just point my reverse proxy at the wireguard IP address or setup a forwarding rule in IP tables. Also try to get a VPS that is located close as it will reduce the ping times if that is important to you. I also recommend that you keep services which you only need to like ssh not forwarded and either use tailscale or wireguard to connect when you need to. With regards to the switch it is theoretically possible to setup a special access point with port forwarding through a VPN but it is much more complicated. It might be easier to accomplish this with a more traditional VPN service as some providers specifically cater to individuals looking to use a VPN for online play.

source
Technoguyfication@sh.itjust.works ⁨6⁩ ⁨months⁩ ago
Set up a cheap VPS on DigitalOcean or the like, and run a Tailscale exit node. Put Tailscale on your devices at home (or get a 2nd router that allows you to run Tailscale on it) and join them to the same Tailnet. That’s the easiest way to accomplish this without getting too far into the weeds.

source
vsis@feddit.cl ⁨6⁩ ⁨months⁩ ago
VPS + VPN is the cheapest option I believe for the services. It doesn’t have to be “elaborate”.

You can port-forward public VPS ports to your private addresses/ports. If you don’t want to use iptables you can use firewalld.

The only “but” will be latency. For gaming it won’t perform as you may need.

major.io/p/forwarding-ports-with-firewalld/

docs.redhat.com/en/…/sec-port_forwarding#sec-Addi…
source
cola_nut@lemmy.world ⁨6⁩ ⁨months⁩ ago
I’m currently running option B since I had the same issue where I was living when I built my server. I have a DigitalOcean vps and an openvpn tunnel between that and my home server, and the vps just forwards and masquerades all traffic. I’ve definitely had issues with speeds, and in the past it’s fluctuated so could’ve been an issue with something besides the vpn. It’s been a while since I’ve used it for streaming or game servers, but last I remember the speed wasn’t too bad. Playing factorio there was some noticeable latency but still playable although other games might not work as well. I’ve also done self-hosted broadcasts using owncast and that worked fine.

source
LodeMike@lemmy.today ⁨6⁩ ⁨months⁩ ago
Yes you can do this. Two problems:

It isn’t fast. Watch your MTU.

Youll have to make sure return packets come through the VPS on their way back. You’ll have to set up those packets to masquerade on their way out, otherwise you’d see internal IPs on the internet (they get dropped immediately). You can either masquerade them on the inside so they appear to be coming from your VPS (internally), or if you want the destination computer to see the real Internet IP, you’d need to set up rules on the destinarion computer which routes packets through the VPS otherwise they’d return via the default gateway.

source
ollie@lemmy.dbzer0.com ⁨6⁩ ⁨months⁩ ago
why get a low cost vps to route the traffic through when you can just run the app on the vps?

source
- johnnixon@lemmy.world ⁨6⁩ ⁨months⁩ ago
  It depends on the app. Yes, I could run my password manager on the VPS since that takes up virtually no space or bandwidth. The odd IP camera needs to be local, the Minecraft server with mods needs local CPU power and RAM (presumably).
  
  source
- WeirdGoesPro@lemmy.dbzer0.com ⁨6⁩ ⁨months⁩ ago
  Storage size, privacy, security, operating cost…I can think of several reasons. I use a cheap vps to help me route traffic to my ebook server, and I don’t have to pay for extra storage on the vps to hold all my comic books, which can be quite large when scanned in HD.
  
  source
cm0002@lemmy.world ⁨6⁩ ⁨months⁩ ago
I would do option A, but instead of just not using the free internet, I would use it for everything else not needing server services. So like streaming or general browsing.

Just leaving the Google fiber as a dedicated pipe for all my self hosted services

source
- johnnixon@lemmy.world ⁨6⁩ ⁨months⁩ ago
  I just got a Ubiquti Dream Machine that can do fail over so the other connection won’t be completely wasted but $70 per month could be saved by finding another way.
  
  source
AmbiguousProps@lemmy.today ⁨6⁩ ⁨months⁩ ago
I’m not sure that it would fix all of your issues, but you could put some stuff behind a reverse proxy and use something like duckdns to setup dynamic dns.

source

Fewer Letters	More Letters
HTTP	Hypertext Transfer Protocol, the Web
IP	Internet Protocol
VPS	Virtual Private Server (opposed to shared hosting)
nginx	Popular HTTP server