this post was submitted on 19 Nov 2023
2 points (100.0% liked)

Home Networking

11 readers
1 users here now

A community to help people learn, install, set up or troubleshoot their home network equipment and solutions.

Rules

founded 1 year ago
MODERATORS
 

Hi, I switched service provider at the cottage and the new one uses CGNAT and I therefore can no longer directly access my systems at the cottage (I used to do it through ddns and duckdns.org). These systems are all residing behind a proxy server at the cottage encrypting their traffic over the internet (so only that proxy service is visible to the outside world). The services I have there is my Home Assistant, my security cameras and my weather station. The remote access used to come from my other Home Assistant at home, whatever PC I might be using, my phone and even my watch so a cloud service that requires something to be installed on the devices I carry with me won't work.

Transferring these services to a cloud provider will not work since all of them need access to devices residing within the cottage network (ie, Tasmota devices for Home Assistant, camera feeds for the security system and weather station probes for the weather station software).

I was thinking of writing a Python software that would run on the Raspberry Pi 4 at the cottage that would open a (persistent) connection to a Raspberry Pi 4 at home (where I do have a (dynamic) public IP) running another Python program listening for such connection and also listening for incoming connections from clients (ie, me, through whatever PC, my phone or watch). That home Raspberry Pie would then be a gateway to redirect the traffic to the cottage proxy server through that 'tunnel'.

Before going this route and investing time into this, I wanted to check if someone did something similar that I could use instead or had other ideas.

Thanks.

top 14 comments
sorted by: hot top controversial new old
[–] Leading-Call9686@alien.top 1 points 11 months ago (1 children)

I have a remote cabin that’s semi off the grid. It has a starlink connection and I use tailscale. Works flawlessly

[–] sylvaing@alien.top 1 points 11 months ago
[–] Glaborage@alien.top 1 points 11 months ago (1 children)

Since I don't see it mentioned in this thread, wouldn't enabling IPv6 allow you to do what you want?

[–] sylvaing@alien.top 1 points 11 months ago (1 children)

Tried that, but couldn't get it to work and after talking with my provider's support team, I learnt that they don't let IPv6 connections in.

[–] Glaborage@alien.top 1 points 11 months ago (1 children)

That's a pretty strange statement from your ISP. You should be able to configure your router to allow traffic to whatever IPv6 address that you want.

[–] sylvaing@alien.top 1 points 11 months ago

Yeah, I didn't want to push it further with them so I tried on my own and had some success but it was flaky, so I dropped that idea.

[–] mettelephant@programming.dev 1 points 11 months ago* (last edited 11 months ago)

Have you looked at ZeroTier or TailScale ? They would punch out and let you ssh as well as connect with a persistent IP and host name.

[–] AK_4_Life@alien.top 1 points 11 months ago (1 children)
[–] sylvaing@alien.top 1 points 11 months ago

Seems the most popular product.

[–] ZPrimed@alien.top 1 points 11 months ago (1 children)

You could also do this with CloudFlare Access, but Tailscale is probably easier if you're not already using CloudFlare for anything

[–] sylvaing@alien.top 1 points 11 months ago

Not using CloudFare for anything, no.

[–] TiggerLAS@alien.top 1 points 11 months ago (1 children)

Some providers will sell you a public/static IP address for a monthly fee, which would make the CGNAT a non-issue. I'm not saying that is the route to go. . . just a possibility.

[–] sylvaing@alien.top 1 points 11 months ago (1 children)

Tried that, they only have public IP addresses for their satellite Internet connections (which sucks). They don't have public IP addresses for their fiber network. I was pissed when I learnt that because I specifically asked the sales lady when subscribing if they have public IP addresses and she said yes. Only once installed and I tried to get my public IP addresses did I found out the truth.

[–] TiggerLAS@alien.top 1 points 11 months ago

Who is the carrier?