Conversation

Notices

1. Embed this notice
   feld (feld@friedcheese.us)'s status on Saturday, 29-Mar-2025 03:17:18 JST feld
   Do you want cheap static IPs from the cloud but use them at home because you don't want to pay exorbitant costs to run your workloads on their slow VMs when you have a capable homelab with gobs of compute and storage?
   
   Well, you can just transport them to your homelab with a Wireguard tunnel.
   
   https://blog.feld.me/posts/2025/03/static-ips-from-the-cloud/
   • prettygood, Phantasm and Another Linux Walt Alt like this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 29-Mar-2025 03:22:24 JST feld

     in reply to
     I actually have a redundant internet connection over a 5G hotspot, so with this setup even if my primary internet goes down the Wireguard tunnel will just re-establish within 5 seconds (PersistentKeepalive) and my selfhosted services at home will remain online.
   • Embed this notice
     :apa: スプリットショックウイルス † (splitshockvirus@mstdn.starnix.network)'s status on Saturday, 29-Mar-2025 03:28:19 JST :apa: スプリットショックウイルス †

     in reply to

     • かき@GNUsocialJP

     @feld That's what I do for videos.danksquad.org

     ✙ dcc :pedomustdie: :phear_slackware: and feld like this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 29-Mar-2025 03:30:37 JST feld

     in reply to

     • :apa: スプリットショックウイルス †
     @splitshockvirus add in iBGP for your local network and you'll feel like a real wizard
     
     If I really wanted to I could have it run on a second VM/jail and use exabgp to detect when it becomes primary and automate enabling/disabling the Wireguard tunnel that way. Then you'll have redundancy/failover too!
   • Embed this notice
     :apa: スプリットショックウイルス † (splitshockvirus@mstdn.starnix.network)'s status on Saturday, 29-Mar-2025 03:41:03 JST :apa: スプリットショックウイルス †

     in reply to

     • かき@GNUsocialJP

     @feld

     BGP is usually where I tap out because I never got that far in my Cisco courses.

     I had to do the wireguard tunnel because I moved to a place with CG-NAT.

     And then I just routed all relevant ports to the virtual ip with iptables so it dNATs or whatever.

     I did this all because I didn't want to mess with nginx reverse (real) proxy, and prefer letting the network layer handle networking.

     ✙ dcc :pedomustdie: :phear_slackware: likes this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Saturday, 29-Mar-2025 03:46:25 JST feld

     in reply to

     • :apa: スプリットショックウイルス †
     @splitshockvirus
     
     > prefer letting the network layer handle networking
     
     same for load balancing honestly. You can just do it with iBGP and it has way higher performance. You don't need a fancy load balancer or reverse proxy.