home.social

#cgnat — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cgnat, aggregated by home.social.

fetched live
  1. Старому Jetson Nano — домашнее облако: Nextcloud, Immich, CGNAT и три USB‑сбоя

    В связи с переездом перебирал дома старые коробки и нашёл NVIDIA Jetson Nano Developer Kit — сын всерьёз занимался робототехникой. Зная, сколько это стоило в своё время, решил поискать, куда его можно применить. Заодно проверил, насколько AI‑инструменты реально ускоряют такие проекты — не в маркетинговом смысле, а по факту. У меня постоянно переполнялся аккаунт Google, поэтому возникла идея сделать локальное хранилище на базе Jetson. Провёл поиск похожих проектов и понял, что это реализуемо. Доступ к домашнему ресурсу из интернета организовал через имеющийся VPS. В статье расскажу, какое оборудование использовал, как построил архитектуру, с какими сбоями USB столкнулся и что в итоге получилось.

    habr.com/ru/articles/1062914/

    #Jetson_Nano #Nextcloud #Immich #домашнее_облако #CGNAT #Docker #autossh #USB_SSD #reverse_SSH_tunnel #Claude_Code

  2. Called my ISP to remove CGNAT and they said „no problem we will call you tomorrow to update you“. If I had known earlier that it would be that easy I would have done that in the first place and wouldn’t have bothered with IPv6. Well at least I learned a bit about IPv6.

    #selfhosting #selfhosted #selfhost #ipv6 #cgnat #isp

  3. Called my ISP to remove CGNAT and they said „no problem we will call you tomorrow to update you“. If I had known earlier that it would be that easy I would have done that in the first place and wouldn’t have bothered with IPv6. Well at least I learned a bit about IPv6.

    #selfhosting #selfhosted #selfhost #ipv6 #cgnat #isp

  4. I think I finally managed to make my home server accessible from outside my local network without using a VPN (I opened port 443). It was some work since I couldn't use IPv4 (I'm behind CGNAT) and had to use IPv6. It took some time to figure out but in the end it was surprisingly simple. Now I just have to wait until tomorrow to see if everything is still working then because it also worked yesterday evening but not today in the morning (IPv6 address of my server changed, now I gave it a static one)

    #selfhost #selfhosting #homeserver #cgnat #ipv6

  5. I think I finally managed to make my home server accessible from outside my local network without using a VPN (I opened port 443). It was some work since I couldn't use IPv4 (I'm behind CGNAT) and had to use IPv6. It took some time to figure out but in the end it was surprisingly simple. Now I just have to wait until tomorrow to see if everything is still working then because it also worked yesterday evening but not today in the morning (IPv6 address of my server changed, now I gave it a static one)

    #selfhost #selfhosting #homeserver #cgnat #ipv6

  6. @goetz @verbraucherzentrale_nrw #CGNAT ist aber nicht das selbe wie #dsLite #dualstacklite, wie du weißt.

    Bei #dslite wäre mein Anschluss tatsächlich ohne IPv6 völlig tot. So habe ich ja wenigstens noch "kastriertes" #IPv4, wenn ich aufgrund von #CGNAT ohne IPv6 auch nicht mehr von draußen in mein Heimnetz komme...☹️

  7. @r Da hilft Dir sicher gerne die @verbraucherzentrale_nrw
    Das ist ein #CGNAT Anschluss. Also ist er ohne #IPv6 technisch kein Internetanschluss. -> Totalausfall

  8. @r Da hilft Dir sicher gerne die @verbraucherzentrale_nrw
    Das ist ein #CGNAT Anschluss. Also ist er ohne #IPv6 technisch kein Internetanschluss. -> Totalausfall

  9. VPS-бастион: доступ к домашнему серверу без белого IP

    У вас дома крутятся полезные сервисы: Home Assistant, Jellyfin, code-server или Nextcloud. Или вы только собираетесь их запустить. Пока вы дома, всё открывается по локальному IP. Но стоит выйти за пределы квартиры, и сервисы пропадают. Причина: провайдер выдал серый IP-адрес, то есть применяет CGNAT. Белый адрес получить либо нельзя (примерно, как советский дефицит), либо он стоит дополнительных денег.

    habr.com/ru/articles/1038186/

    #VPS #SSHтуннель #проброс_портов #CGNAT #серый_IP #домашний_сервер #удаленный_доступ #autossh #systemd #Caddy

  10. Anyone open to share some good papers about #CGNAT infrastructure? I am trying to read more and more into this, and I am happy for anyone sharing resources and/or papers on it.

    #askfedi #askinfosec #internet

  11. Anyone open to share some good papers about #CGNAT infrastructure? I am trying to read more and more into this, and I am happy for anyone sharing resources and/or papers on it.

    #askfedi #askinfosec #internet

  12. Mal eine Frage bei der ich ein bisschen Fedipower braucht, also bitte boosten wenn es euch nichts ausmacht.

    Wie sieht das bei den einzelnen Glasfaser Providern Telekom, Vodafone und O2 aus? Habe ich bei irgendeinem davon noch die Chance Dual Stack zu bekommen? Also eine echte externe IPv4 und IPv6 Adresse?

    Das ich die bei Vodafone (ehemals Unitymedia) habe habe ich nur einem Glücklichen Zufall vor ein paar Jahren zu verdanken.

    Wäre super wenn Ihr mir da mal eure Erfahrungen posten könntet.
    #fedipower #glasfaser #dualstack #cgnat

  13. Mal eine Frage bei der ich ein bisschen Fedipower braucht, also bitte boosten wenn es euch nichts ausmacht.

    Wie sieht das bei den einzelnen Glasfaser Providern Telekom, Vodafone und O2 aus? Habe ich bei irgendeinem davon noch die Chance Dual Stack zu bekommen? Also eine echte externe IPv4 und IPv6 Adresse?

    Das ich die bei Vodafone (ehemals Unitymedia) habe habe ich nur einem Glücklichen Zufall vor ein paar Jahren zu verdanken.

    Wäre super wenn Ihr mir da mal eure Erfahrungen posten könntet.
    #fedipower #glasfaser #dualstack #cgnat

  14. Und weil wir gerade das Thema wireguard hatten: ich sitze ja hinter einem cgnat, was das reverse proxying schon anspruchsvoll macht. Bin eigentlich immer über nen ssh tunnel ausgebrochen ;). Hab heute mal auf wireguard umgestellt. Gefühlt 300% Performance Steigerung 🙈

    #wireguard #selfhost
    #cgnat #ipv6

  15. someone out there is wrestling with #cgnat and trying to torrent. Use TCP and not UDP, it's less noisy.

    #random

  16. someone out there is wrestling with #cgnat and trying to torrent. Use TCP and not UDP, it's less noisy.

    #random

  17. CGNAT khiến bạn không thể port‑forward dịch vụ tự host. Bài viết giải thích CGNAT là gì, khác biệt với NAT thường, và cách bypass nhanh bằng công cụ mã nguồn mở, giúp mở web server, cloud riêng ngay. #CGNAT #PortForwarding #SelfHosted #Mạng #CôngNghệ #Tech

    reddit.com/r/selfhosted/commen

  18. CGNAT khiến bạn không thể port‑forward dịch vụ tự host. Bài viết giải thích CGNAT là gì, khác biệt với NAT thường, và cách bypass nhanh bằng công cụ mã nguồn mở, giúp mở web server, cloud riêng ngay. #CGNAT #PortForwarding #SelfHosted #Mạng #CôngNghệ #Tech

    reddit.com/r/selfhosted/commen

  19. Một người dùng đã chuyển từ Wireguard sang Tailscale do gặp vấn đề CGNAT sau khi đổi router, nhưng gặp trục trặc khi kết nối các thiết bị ESP32 qua ESPHome với Home Assistant (Wireguard không hỗ trợ trên Tailscale). Đang tìm lời giải không cần VPS hay thiết bị thêm, cân nhắc dùng IPv6. #Wireguard #Tailscale #ESP32 #IPv6 #CGNAT #ESPHome #HomeAssistant

    reddit.com/r/selfhosted/commen

  20. Cần trợ giúp để truy cập Jellyfin trên TV khi mạng bị CGNAT? Bạn có giải pháp nào thay vì dùng Tailscale? Có thể dùng mạng chính của gia đình để kết nối từ xa không? #SelfHosting #CGNAT #Jellyfin #HowTo #TựHost #LàmTheoHướngDẫn

    reddit.com/r/selfhosted/commen

  21. Go-Mesh-Hub: Giải pháp **VPN nhẹ** bằng Go, hỗ trợ **Exit Node** & **Bảng điều khiển Web** để vượt CGNAT. Tự động hóa iptables, không cần cấu hình rắc rối. Mã hóa an toàn bằng **ChaCha20-Poly1305**. Kết nối SSH IoT dễ dàng, không cần mở cổng. Dự án **self-hosted**, mời cộng đồng chia sẻ ý kiến! #VPN #CGNAT #Go #SelfHosting #TựKhởiXâyDựng #AnToànMạng

    reddit.com/r/selfhosted/commen

  22. TL;DR: dual-stack to enable IPv6 as it helps with getting more accurate IP Geo

    ----

    IP:Geo is only appropriate for cases where coarse and approximate location is useful and does have gaps.

    One take-away is a reminder that content providers should enable #IPv6 to get improved IP:Geo location, especially as more and more ISPs publish RFC 8805 geofeeds. IP Geo is approximating where a client exits onto the public internet (whether directly, via a CGNAT, VPN, etc).

    While IPv6 may more often correspond to the general area where users are located, IPv4 is often exiting onto the internet through more centrally located #cgnat.

  23. Gemäss Infos die ich online finde, bietet Leucom Internet-Verbindungen per Glasfaser an, aber IPv6 gibt es dabei nicht und IPv4 nur mit CGNAT.

    Weiss da jemand mehr dazu?

    Angaben vom Leucom-Support (Edit):
    - IPv6: "noch nicht"
    - Öffentliche IPv4 Adresse: Dynamisch gegen Aufpreis von SFr 60 / Jahr, statisch nur im Business-Abo
    - Eigene Dienste (VPN, Server, o.Ä.) nur mit separatem Modem ("Unser Modem/ONT ist abgeriegelt")

    #IPv6 #IPv4 #CGNAT #FTTH #Glasfaser

  24. “CGNATs also create significant operational fallout stemming from the fact that hundreds or even thousands of clients can appear to originate from a single IP address,” wrote Cloudflare researchers Vasilis Giotsas and Marwan Fayed. “This means an IP-based security system may inadvertently block or throttle large groups of users as a result of a single user behind the CGNAT engaging in malicious activity.”

    theregister.com/2025/11/03/clo

    #cybersecurity #cgnat #throttling

  25. Interesting post by Cloudflare on detecting #CGNAT as well as the performance and availability impacts to users behind it: blog.cloudflare.com/detecting-

    This re-enforces the importance for both:
    1) content providers to dual-stack sites (so that #IPv6 end-users can bypass CGNAT)
    2) the importance for networks to deploy IPv6 alongside CGNAT so that only a shrinking subset of traffic needs to go through CGNAT

    Of particular concern is the concentration of CGNAT in the developing world, creating even more risk of a multi-tier Internet with an IPv6-centric modern internet but with other parts of the world being stuck in the past with IPv4 CGNAT.