this post was submitted on 13 Aug 2023
32 points (92.1% liked)

Selfhosted

40135 readers
1412 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
32
Need help with port forwarding and Cloudflare DNS records (lemmy.dbzer0.com)
submitted 1 year ago by Tywele@lemmy.dbzer0.com to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
 

Hi,

I wanted to forward the port to my Traefik install on my TrueNAS server. Unfortunately I have now learned that my ISP restricts the range of ports that I can open externally to 12396-12415, so internally I can open port 443 to port 12400 externally. So far so good, but how do I point my Cloudflare DNS record to this port?

My router is a Fritzbox 7530 if that's relevant.

you are viewing a single comment's thread
view the rest of the comments
[–] chiisana@lemmy.chiisana.net 5 points 1 year ago (1 children)

You'd need more than their DNS, as DNS cannot forward ports for you (and before anyone mention SRV records, no, it just tells supported applications which port to use; it does not and cannot externally reassign the port used).

I believe the tool for the job here is the Zero Trust Tunnel; in the Dashboard, on the left, look for Zero Trust, and then on the new dashboard, go Access > Tunnels to setup the tunnel. Documentations are here: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/

[–] Tywele@lemmy.dbzer0.com 1 points 1 year ago (2 children)

Currently I am using Cloudflare Tunnel to access my server remotely. But with this I'm always accessing my server through the tunnel even when I'm at home.

[–] chiisana@lemmy.chiisana.net 1 points 1 year ago (1 children)

If that is a concern (I don’t see much of an issue, but everyone’s got different requirements, so no judgment here at all), then you’d probably want to setup a recursive DNS server inside your network, configure that DNS server to resolve those internal services to your intranet IP address, when it cannot resolve, it recurses to a public one (ie ISP, CloudFlare, quad 9, Google etc). Then, change your network’s DNS to that internal one, so when you’re on your network, you get internal IP address while off network you get CloudFlare tunnel routing.

[–] Tywele@lemmy.dbzer0.com 1 points 1 year ago

I think I got it working now. The last time I tried I couldn't get it to work.

[–] uninvitedguest@lemmy.ca 1 points 1 year ago

I don't have your specific port issue, but it sounds like the setup I have would get around your ISP port restrictions as use CloudFlare tunnels externally, LAN internally, and no ports open.

https://lemmy.ca/post/2804502