Mastodawn

@sterophonick shure you ain't stuck on #CGNAT?

My latest blog post is talking about how I have configured a #tunnelbroker on my #mikrotik thanks to #route64
Now I'm a happy owner of a #ipv6 subnet

#networking #homelab #selfhosted #wireguard #vpn #cgnat

https://www.schwitzd.me/posts/mikrotik-tunnelbroker-with-route64/

Mikrotik - Tunnelbroker with Route64

For learning purposes, I started looking into IPv6. First, I enabled a Unique local address subnet to leverage K3s dual-stack on my Home Cluster. Then I thought it would be cool to be able to connect to my home from abroad, so I started investigating VPNs. It is at this point that I discovered that my ISP currently is only offering IPv4 behind CGNAT for mobile devices (My Mikrotik connects to internet over LTE. Surfing the web I learned about tunnel broker is a service that provides IPv6 connectivity over an existing IPv4-only internet connection by encapsulating IPv6 traffic inside IPv4 packets.

Schwitzd

Show thread

Kevin Karhan

Jul 22

@pmevzek @landley I wish I had this luxury.

Cuz I often have to deal with fucked-up networks that are #IPv4only and sometimes going #DualStack is flatout not being allowed and even having #IPv6 at the public-facing side is seen as a problem.

And I'm more often than not not the guy who gets to make that decision.

I was only able to get IPv6 allowed WAN-side at one place after my employer encountered the problem that some workers have shitty #CGNAT that bricks #OpenVPN so they could not #VPN to the HQ.

Show thread

Kevin Karhan

Jul 21

@pmevzek @landley @jschauma @ryanc @0xabad1dea Add to that not every endpoint I want to connect even has #IPv6 and not every application I have to use works with IPv6 - some won't even work with #CGNAT!

Habr Jul 17

Магия ZeroTier: Создаем личную VPN-сеть для дома и облака за 20 минут

Привет, Хабр! Помните времена, когда «белый» IP-адрес был нормой, а не платной услугой? Когда для доступа к своему серверу хватало простого ssh user@ip_address? Я тоже помню. Но эта эпоха незаметно уходит. Сегодня мы оказались в новой реальности. Ваша домашняя «Малинка» задыхается за провайдерским NAT, а облачный VPS в Европе кажется далеким и изолированным островом. Как получить доступ к первой или второй ? Эта статья — не очередной гайд по VLESS или Shadowsocks для обхода сложных блокировок. Это не "серебряная пуля" против DPI. Это честный гайд по постройке вашей личной, плоской и безопасной L2-сети поверх хаоса современного интернета. Мы соберем VPN-хаб, который не боится NAT, независимо от того, где он будет жить — на скромной «Малинке» дома или на арендованном VPS в другой стране. Мы разберем весь процесс по шагам, от регистрации до настройки полного туннеля, и честно поговорим о компромиссах этого решения.

https://habr.com/ru/articles/928452/

#zerotier #vpn #vpnсервер #vpnтуннель #nat #vps #cgnat #vpnсоединения #Оверлейная_сеть

Магия ZeroTier: Создаем личную VPN-сеть для дома и облака за 20 минут

Хабр

Hongster Jul 9

Some tips for running homelab in Malaysia.

https://tech.mrleong.net/self-hosting-in-malaysia-overcoming-cgnat-for-your-homelab

#selfhosted #homelab #malaysia #cgnat #networking #dns

Bastian Jul 8

Ich muss mal ein bißchen #Werbung machen. #IPv64 hat einen Betatest für das Produkt "VPN Gateway as a Service" gelauncht. Falls euer ISP euch mit #CGNAT das Leben ein bißchen schwerer macht, könnte das evtl. helfen: https://ipv64.net/vpn-gateway

Der Vollständigkeit halber: man kann sowas auch relativ leicht selbst bauen. Ich hab mir das bei @hetzner mit einer #pfsense aufgebaut und habe damit Unkosten von ca. 5€/Monat.

#homelab #Selfhosting

IPv64.net • VPN Gateway as a Service

Create a WireGuard IPv64 VPN Gateway for free and connect your IT infrastructure securely via the Internet.

IPv64.net

Grafcube Jul 1

I have a server in my house that I use to self host random stuff. The thing is, I'm behind CGNAT and only ipv6 is publicly accessible, which shouldn't be a problem, except it's a huge problem. I ran into trouble with fmd and my friends on different ISPs couldn't reach to my server.

I hate cgnat...

#selfhosted #ipv6 #cgnat

🪑Dr Rockstar ♫Jun 12

now that i have the bsky, i wish to learn how use the interactive, so called "federated", or decentralized capabilities (and API)

would you believe i didn't know about cgnat ? so. yeah. brain damage. but i digress.

https://bsky.app/profile/ajaxstardust.bsky.social/post/3lrftpdpxok2v

For example. If I want those "Mastodon users" to be "linked"

#ActivityPub #fediverse #cgnat

Bluesky

Bluesky Social

Show thread

Kevin Karhan

May 29

@AMS @cadey well, #Anubis allegedly does account for #Browsers like #LynxBrowser and handles them gracefully, unless they violate thresholds to stop scrapers that fraudulently use a fake #UserAgent, and then it'll soft-ban those.

Granted on AT&T's ASN you'll likely run into that on #IPv4 connections due to #CGNAT!