Hacker News Reader

Comment by bhaney | Hacker News Reader

Call me crazy, but I don't think "tunnel all your traffic through a third party corporation's service" is the correct solution to "my IP changes sometimes." Maybe just set up DDNS instead?

If you really are trying to run a server behind a CGNAT, then I guess you have no other options, but I'd consider this kind of thing to be a last resort.

View on HN

Not quite, some ISPs lock down their routers and you can't expose the relevant ports publically. That's when Cloudflare Tunnels combined with a reverse proxy save the day.

Another really useful service is being able to protect everything behind a SSO like Github, allowing at least the most basic form of intrusion prevention that would secure your homelab from the majority of attacks.

> Not quite, some ISPs lock down their routers and you can't expose the relevant ports publically.

Here in Italy our public Communications Regulatory Authority (AGCOM) has sentenced that ISPs cannot mandate a specific router type and MUST provide technical details so that any subscriber can be able to use a modem/router of choice. This was after quite a bit of lobbying by the "Free Modem Alliance (https://www.freemodemalliance.it/)

So I guess that at the end of the day i guess it's mostly a matter of political activism.

I love this, and run my own WRT3200ACM with OpenWRT

CGNAT is pretty common unfortunately and sure makes things harder.

Reply on news.ycombinator.com