New Fiber Network, CGNATT'ed to Death

[PhaseLockedLoop]

@TheCakeIsNaOH

Tailscale is pretty good at punching holes without you having to do anything. https://tailscale.com/

@ucav117

Zerotier is basically the same thing as well. I use it extensively. Very good at making connections. If you have internet 99% of the time it will connect.

I personally view thises as more band-aids to what could be a self hosted solution. thats me though…

@MisteryAngel

isp does not give you a full dual stack ip configuration.

Dual stack isnt really needed. CGNAT can be made transparent whats occuring here is his ISP has it in their ToS that he is NOT allowed to host ANYTHING out of his HOME connection. Those are keywords there. Violating or getting caught violating that results in termination of service.

@snsaklani

I have a domain, i tried to Wireguard into a Linode instance can’t even get those two to ping, DDNS Services can’t seem to find my IP any solutions, I’m at my wits end.

Try again. Wireguard is useful. Here man

Infrastructure Series -- Native Dual Stack IP4+IP6

Infrastructure Post 1: Setting up a dual stack environment! Obligatory shill of blog stream post: Phaselockedloopable- PLL’s continued exploration of networking, self-hosting and decoupling from big tech As always check for updates in the second post IPv6 is becoming increasingly common place so its time we had a wiki on a native dual sta…

Infrastructure Series -- Wireguard Site to Site Tunnel

Infrastructure Post 1: Making a site to site tunnel for access behind a well structure firewall and obscufation of home hosting Obligatory shill of blog stream post: Phaselockedloopable- PLL's continued exploration of networking, self-hosting and decoupling from big tech As always check for updates in the second post What is a site to si…

Infrastructure Series -- NGINX Reverse Proxy and Hardening SSL

Obligatory shill of blog stream post: Phaselockedloopable- PLL’s continued exploration of networking, self-hosting and decoupling from big tech As always check for updates in the second post NGINX Overview So we’re all familiar with what a reverse proxy is I’m not really going to get too much into that however, most people just set one up…

Ive written all of these. The reason wireguard wont ping is because their documentation doesnt discuss the necessary IPtables and firewall rules. It also doesnt discuss setting up proper static routes

Good luck!

Disclaimer: I, being PLL or L1T, am/are not responsible for breakage. YMMV. Support on guides offered on a per my own free time basis. I am also not responsible for termination of ISP provided services in case you are circumventing their TOS.

@mharsch

and it works but then you have to manually manage all the keys which is a big hassle unless you just have a few hosts that never change

Depends on how you handle it tbch.

You can let it run network wide. Provide static routes or have a router force all through if thats your goal

LOTS of ways to set it up that few people actually see because their docs aint great

@snsaklani

Well I’m off trying tailscale lord help me.

if it fails try wg again. self host its worth controlling your endpoint security