Submitted 1 month ago by kionite231@lemmy.ca to selfhosted@lemmy.world
Greetings,
my current ISP refuses to provide me a static IP and they also blocks incoming connection to my ipv6 so I can’t host services on just ipv6 too. I will be changing my ISP when the plan expires.
without public IP I can host my own IRC bouncer but I would like to know what else can I self host? Thanks in advance!
Basically everything. Self hosting doesn’t rely on public access.
Self host all your stuff and use tailscale if you just want to provide private services to yourself
Put everything behind Tailscale or another VPN and use it that way from outside devices. There should be very little need to have a public IP, and if there’s something that has to be exposed, use ngrok, cloudflared or Tailscale tunnel.
Tailscale or Cloudflare will solve your problems.
Rent a VPN, setup a wire guard tunnel and fuck your ISP!
Anyway having a real public IP on a residential block is basically impossible anywhere but in the USA, I guess.
Public IPV4 here. It’s not static, but very rarely rotates. DDNS ftw.
Telus Residential in Canada.
CGNAT blows, but easy to workaround w/ a $5/mo VPS.
Straya. I have a static ip. Costs like 5$ a month
As someone in a similar situation I’d recommend using a free tier oracle vps with a wireguard tunnel to connect to you services. Effectively just using the vps as a proxy for your own network. Here’s a guide that should work for your purposes github.com/mochman/Bypass_CGNAT
Oracle deletes servers with no warning and for no reason. I wouldn’t use them
I mean you can host anything. It's just not reachable from the outside. And Fedivers ir anything that gets data pushed in, won't work. The common thing to handle this is to use some tunnelling solution.
I just use a DDNS updater. That’s honestly good enough for most purposes.
Alternatively, you could use a service like Zerotier, Tailscale or Netbird to create a virtual private LAN connection to a free Oracle VPS, then route the traffic from the VPN to your home network.
Literally anything you want. You don’t need a static IP, any dynamic IP with a software updater will work. For example, I have some public sites proxied through Cloudflare, and I use the DDNS updater for Docker that keeps my DNS correct.
The ISP is blocking his ports too, it seems.
That’s an odd thing to see these days. I didn’t know ISPs still did that. I bet they offer a more expensive tier for businesses is why.
Should check which ports.
Mine blocks 80 inbound and 24 outbound, but everything else I’ve tried works.
I only really want 443 for simplicity, everything else can be random ports.
The best way would be to use a VPS to proxy your traffic to you. You can achieve this for pretty cheap, just set up an wireguard tunnel to a cheap VPS. That’s exactly how I access all my services from outside my home.
This is the way OP
If this is just for personal use, I’d see if you can put their router in modem mode and go get a better router, then I’d just use tail-scale or WireGuard.
tailscale is looking good I might try that
It’s amazing additionally you can run Mullvad through it that might solve your public IP issues but I only run my services for me and my house
You can use Tailscale, you can access your personal services with it but also expose public services with their Funnels system.
I started using headscale (the opensource reimplementation of tailscale server) on a private vps. It is incredibly better compared to plain wireguard. I regret waiting so much before switching.
Something that really made my life easier: wireguard is poor at roaming: switching to and from my wifi created issues because the server wasn’t reachable anymore from its public ip and wireguard didn’t bother to query the DNS again to check the new IP. Also, configuration is dead simple because it takes care of iptables for you (especially good when you enables forwarding to a node).
Since the server just sends small messages for the control plane and all the traffic is p2p between the devices, the smallest vps with the smaller connectivity is more than enough to handle it.
my current ISP refuses to provide me a static IP
So then use dynamic dns? HurricaneElectric offers DynDNS now and it’s great. You can update it right over curl if you want. I have it mapped to a cli function;
~\downloads ❯ ddns HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate Content-Length: 18 Content-Type: text/html Date: Tue, 25 Feb 2025 09:24:18 GMT Email: DNS Administrator <dnsadmin@he.net> Expires: Wed, 25 Feb 2026 09:24:18 GMT Server: dns.he.net v0.0.1 nochg {ip}
It’s not only not static It’s firewalled too! I can’t ping it from outside the network
Did you configure NAT to the service(s) and/or DMZ to your internal server in your ISP’s router?
Not allowing even ping seems like it is against any sane networking configuration.
Oh, damn. Not much you can do then. You may be eventually be able to get something outrageously complicated to work, but honestly it’s just plain not worth it. Just get a cheap VPS.
Best you could do is a forward server with tailscale and a reverse_proxy, but I’ve never had any real luck getting that type of setup to work reliably.
You don’t want to expose services to the internet
Use Cloudflare’s free tier tunnel
They’ll shut it down if you send more than a few megabytes down that tunnel. It’s ok if you just need a connection (for ssh and stuff) but anything that generates a lot of traffic will be blocked.
I haven’t checked the ToS in a while but last I checked it was 50mb upload limit for the free tier and a loosely policed no video streaming. I served over 8 million requests through the free tier last month.
I just have a script that checks my IP every few minutes and changes the DNS record as necessary
Why do you need to expose a service publicly?
Why do you need to make a question questioning OP needs, when he is looking for a solution to a problem?
Because of the XY problem. The problem OP is stating may not actually be the source of the issues OP is experiencing.
Finding out what OP is trying to do will better inform a solution and may make the stated problem irrelevant.
Because they are trying to blow off there own foot.
Look:
Just make sure you secure everything
I believe duckdns has a tool that checks your public ip on a schedule to update your subdomain.
That would solve not having a static IP, not solving having no port forward right?
You usually only need to specify the internal host ip to setup a port forward. It should forward that to whatever the public ip is at the time.
If the isp is providing the model/router and generally being oppressive i highly recommend researching if you can place your own router behind it.
Use VPN or DDNS connected to your domain registrar. Of course DDNS might not update immediately, especially if your domain host is not the same as your DNS provider, so you might have outages for short periods when your IP changes. So, depends on if you’re OK with that or what kind of connection you have and whether it changes your IP a lot.
Also, might be able to get an IPv6 address for free depending on your ISP or at least you can set up your router to request that your address block is retained for you. I know Comcast does this. Unfortunately, my host does not.
Anything
I use cloudflare / cloudflared agent to provide features hosted locally
I use a cheap VPS and connect all my relevant devices to it.
softwares
That’s like ‘traffics’ and ‘manies’ and ‘mails’, right?
They don’t seem to realize that you can run whatever software you want internally.
just_another_person@lemmy.world 1 month ago
Anything. You don’t need any services to be public unless you choose for them to be.
kionite231@lemmy.ca 1 month ago
actually I was thinking about hosting my own fediverse service to own my data but I can’t do that without a static public IP and domain name.
rtxn@lemmy.world 1 month ago
As long as you’re not behind CGNAT, you can use a dynamic DNS provider (like duckdns.org) and its web API to keep a record pointed at your IP. If you’re behind CGNAT, Tailscale also has a service (Tailscale Funnel) that can expose an internal service to the internet.
sk@hub.utsukta.org 1 month ago
superglue@lemmy.dbzer0.com 1 month ago
You actually want a cloudfare tunnel if youre going to do that. It protects your real IP. Hosting a fediverse instance will draw attention to your real IP eventually otherwise.