Comment on Cloudflare Global Network experiencing issues

yxp@lemmy.radio ⁨14⁩ ⁨hours⁩ ago

• qjkxbmwvz@startrek.website ⁨13⁩ ⁨hours⁩ ago

  VPS+VPN, this is what I do.

  VPS has public IP and runs WireGuard “server”* and a reverse proxy (and fail2ban…). Reverse proxy points to my home computer over the WireGuard link. No open ports on my home router.

  For private facing/LAN-only services I just don’t have an entry in the VPS reverse proxy. DNS on the router points everything to my local server, so if at home I access everything directly. To access internal services remotely requires VPN (i.e., WireGuard to the VPS).

  Works well; I have a tiny free tier VPS but even so, no complaints.

  *Yes I know there are no wg clients or servers, only peers, but it plays a server-likr role.

  source

  • yxp@lemmy.radio ⁨13⁩ ⁨hours⁩ ago

    I’ve been thinking about this setup but it depends on external server after all…

    source

    • qjkxbmwvz@startrek.website ⁨12⁩ ⁨hours⁩ ago

      Yes, but you can run multiple VPS, from different providers, simultaneously.

      What I like is that while it does depend on an external provider, it doesn’t depend on a specific external provider. Any VPS with a public IPv4 would work.

      source

      • yxp@lemmy.radio ⁨12⁩ ⁨hours⁩ ago

        I wish I could afford multiple VPS

        source

        • -> View More Comments
• B0rax@feddit.org ⁨13⁩ ⁨hours⁩ ago

  Maybe Pangolin is what you are looking for.

  source

  • yxp@lemmy.radio ⁨13⁩ ⁨hours⁩ ago

    So it’s basically the same as what startrek.website/u/qjkxbmwvz described above … but with extra security features?

    source
• killabeezio@lemmy.zip ⁨12⁩ ⁨hours⁩ ago

  Just use wire guard. This is what tunnels is and this is what tail scale uses

  source
• CodingCarpenter@lemmy.ml ⁨12⁩ ⁨hours⁩ ago

  You could use something like tail scale

  source

  • fristislurper@feddit.nl ⁨12⁩ ⁨hours⁩ ago

    Tailscale is definitely the most frictionless solution. But you will then rely on tailscale instead of cloudflare, so not ideal. You can also host Headscale so you do not have to rely on them either.

    source

    • CodingCarpenter@lemmy.ml ⁨8⁩ ⁨hours⁩ ago

      I’ve never heard of headscale. Can you hook this up to a domain like you can with cloudflare tunnels? That was my main reason for using it. Being able to just hand my family member a domain to point to and see audiobooks

      source
  • yxp@lemmy.radio ⁨12⁩ ⁨hours⁩ ago

    Tailscale is fine, problem is I have to keep my phone connected to the tail network, which drains the battery. I do have a tailscale subnet router running under my network so I can fix things remotely.

    source