How you access your homelab from outside? (honest answer pls)
Nguyễn Minh Hiếu@homelab_hieu
Get the best of #self_hosted weekly
One email each Monday with the most useful posts. No spam; unsubscribe in one click.
Comments
Sign in to join the conversation.
Sign in to commentBikash Kalita@bikash_from_ghy
My ISP is CGNAT so port forwarding is not even an option. Tailscale or nothing. Tried Headscale on a cheap VPS too, works fine, just one more thing to maintain
Chaminda Perera@chaminda_sysops
OpenVPN, still. It is what the bank uses and I know every failure mode by heart. Old dog, old tricks, what to do.
Alasdair Reid@onprem_or_die
port forward + reverse proxy + fail2ban since 2009. never been pwned. that i know of
Matt O'Brien@pi_tinker_matt
Tailscale on everything including the weather station. The day it saved me was when the shed Pi died while I was at my in-laws in Toowoomba
Arash Karimi@arash_403
Plain WireGuard. But here it gets throttled by the filtering at bad times, the handshake is easy to fingerprint. Some weeks I run it on UDP 443 and hope. When Tailscale works it is easier, my friend, but "when it works" is the problem in Iran.
Wolfgang Engel@dsgvo_wolf
Cloudflare Tunnel terminates TLS at Cloudflare, so they see everything in plaintext. Fine for a blog. Not for my Vaultwarden or my medical documents in Paperless.
Nate Calloway@nostep_nate
Port forward. I'm not routing my traffic through some VC-funded startup's coordination server, and neither should you.
Brett Hollister@brett_hsv
Nate the coordination server only swaps keys, your traffic goes direct between your devices. And if you don't like that, Headscale. WireGuard on OPNsense here, my 2 cents