Looking for an alternative to cloudflare tunnel

Submitted ⁨⁨1⁩ ⁨year⁩ ago⁩ by ⁨Dave811@lemmy.today⁩ to ⁨selfhosted@lemmy.world⁩

Hi, I moved this year to another city, because my internet provider didn’t give me a dedicated ipv4 address I can’t use a dyndns like duckdns. Another thing to mention is, that I have a dslite tunnel. So I can’t set up dyndns…

So my recent setup is a truenas server sitting under my desk. This is connected via cloudflared to the cloudflare tunnel. There I have my services like seafile or nextcloud configured. They are all pointing to a traefik instance that routes the traffic to the right container.

So to summarize what I have:

Truenas server
- multiple services
dslite tunnel
own domain
Cloudflare tunnel
v-server
- Nginx
- docker

To visualize the route the traffic is going

Internet - cloudflare tunnel - cloudfared docker - traefik docker - service (nextcloud) docker

So I want to setup something on my v-server that routes the traffic to my homeserver (truenas)

Internet - DNS (cloudflare) - v-server - (magic docker service on truenas) - traefik docker - service (nextcloud) docker

Does someone have an idea how to solve this?

source

Comments

Sort:hotnew top

cron@feddit.de ⁨1⁩ ⁨year⁩ ago
My suggestion would be to setup a VPN service in your publicly available v-server. The most suggested solution is wireguard.

Then you can connect your truenas to that VPN and make it accessible, maybe via nginx.

The traffic flow would be:

nginx on v-server --(wireguard)--> traefik --> Nextcloud
source
- Dave811@lemmy.today ⁨1⁩ ⁨year⁩ ago
  That’s a good point. But that’s also the point where my tinkering won’t help me… Do you have a writeup or a yt video where nginx points to the wireguard VPN? Another question. If I set up the wireguard tunnel, how can I just route the traffic from traefik?
  
  source
  - cron@feddit.de ⁨1⁩ ⁨year⁩ ago
    I found this writeup and it looks correct, but I have not tested it.
    
    The author posted a nice graphic that shows the idea:
    
    Image
    
    source
    -> View More Comments
  - CriticalMiss@lemmy.world ⁨1⁩ ⁨year⁩ ago
    Basically once you have WG set up, you will have an additional interface with it’s own IP in “ifconfig”. At that point all the ports are available and you can just point your reverse proxy to them (sorry I’m an NGINX user, I have no idea how Traefik works).
    
    Additionally don’t forget to add keep-alive in your WG config so that the service doesn’t shut off once traffic stops going between both servers.
    
    source
lemmyvore@feddit.nl ⁨1⁩ ⁨year⁩ ago
Install Tailscale (1) on the VPS and (2) in a Docker container on TrueNAS. The Tailscale container #2 will replace the cloudflared container. Set the Tailscale #2 node as a subnet router exposing the Traefik container’s netmask (you probably already know how to get networking going between two Docker containers).

What you’ll end up with:

Internet -> DNS (your domain) -> VPS public IP (Tailscale node #1 ===> Tailscale node #2 in Docker on TrueNas) -> Traefik -> web apps on your TrueNAS

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago
  This actually sounds insanely cool. Without having looked at their documentation, can you make a rough statement about the required hardware power for the VPS, especially if traffic may include bandwith heavy stuff like movie streaming or large data up/downloads?
  
  source
  - lemmyvore@feddit.nl ⁨1⁩ ⁨year⁩ ago
    In that case you should probably give up using your own domain and take the one from Tailscale because they would intermediate direct connections whenever possible.
    
    The main limitation on the VPS would be bandwidth as well as total transfer, not so much processing power because their just be moving stuff through. They all come with limits.
    
    source
Gutless2615@ttrpg.network ⁨1⁩ ⁨year⁩ ago
[deleted]
source
- Dave811@lemmy.today ⁨1⁩ ⁨year⁩ ago
  The problem is with nextcloud on my end. Some files just can’t get synced and bigger files won’t even go through. Perhaps something is misconfigured, but I think I red something, that cloudflare tunnels only support x gb of traffic at once.
  
  source
  - CriticalMiss@lemmy.world ⁨1⁩ ⁨year⁩ ago
    CF free tier specifies in their ToS it’s not for media so likely yeah, you’re getting some sort of rate limitation.
    
    source
    -> View More Comments

Decronym@lemmy.decronym.xyz ⁨1⁩ ⁨year⁩ ago

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters	More Letters
CF	CloudFlare
CGNAT	Carrier-Grade NAT
HTTP	Hypertext Transfer Protocol, the Web
NAT	Network Address Translation
VPN	Virtual Private Network
nginx	Popular HTTP server

[Thread #238 for this sub, first seen 24th Oct 2023, 16:55] [FAQ] [Full list] [Contact] [Source code]

source

pacjo@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago
rathole aims to be somewhat of a replacement for CF tunnels. It was featured on noted some time ago: noted.lol/cgnat-and-rathole/

source
possiblylinux127@lemmy.zip ⁨1⁩ ⁨year⁩ ago
A linode vps is what I use

source
Apollo2323@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago
This question is not related to the question you ask but where did you learn to configure traefik? When I try it out I didn’t understand how to route traffic through that.

source
- Dave811@lemmy.today ⁨1⁩ ⁨year⁩ ago
  So I use traefik on my truenas server from the truecharts catalogue. If you need help there I can send you the corresponding links from the truecharts website later, I am not at the computer right now.
  
  source
  - Apollo2323@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago
    I will really appreciate if you send me the links! The image is broken and not loading :(
    
    source
    -> View More Comments
BaalInvoker@lemmy.eco.br ⁨1⁩ ⁨year⁩ ago
The easiest way I found to passthrough a cgnat is using a VPN.

I suggest using Tailscale, cause it does some tricks to bypass cgnat and you can access your truenas server.

source
scottmeme@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
Haven’t tried it myself, but I’ve heard others talk about tailscale

source
MonkCanatella@sh.itjust.works ⁨1⁩ ⁨year⁩ ago
I’m in the same boat and looking at options. I’ve benchmarked several options tht provide their own relays, and am in the process of setting up my own relays to test out on oracle free tier vps, which will probably be the best option as all the bandwidth that vps can handle will be dedicated to you and not shared. That said I’ve found tailscale to perform the best and twingate to perform the worst. I’m looking at netbird and netmaker but they’re extremely buggy and difficult to get going. Netbird is just busted in so many ways. Netmaker’s relays can’t get past my cgnat. Self hosting both of these should work but I’ve not tried it yet. The absolute easiest to set up has been tailscale though, can’t go wrong with that. For most use cases except for handling massive amounts of data, tailscale should be more than sufficient. That said, I’m looking to try selfhosting netbird, netmaker and headscale to see how those perform compared to tailscale’s own relays.

source
emhl@feddit.de ⁨1⁩ ⁨year⁩ ago
You could proxy your Webservice though a reverse SSH tunnel to a vps (that’s basically what cloudflare tunnels do)

source
dansity@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago
Have you tried zerotier?

source