this post was submitted on 09 Feb 2024
14 points (100.0% liked)

Selfhosted

40198 readers
607 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
HybridSarcasm@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
14
Tunnelling a port from a separate computer (lemmy.sdf.org)
submitted 9 months ago by dadarobot@lemmy.sdf.org to c/selfhosted@lemmy.world
12 comments fedilink hide all child comments
 

I have a client with locally hosted security cameras. There is a DVR box that has a port open and a 3rd party app you can view the cameras from. Traditionally we have been forwarding the port to the WAN via the router there. Its a restaraunt btw.

When the ISP upgrades the router every few years there's a huge headache trying to get the ports back open and bridging the modem and router blah blah blah. Not only this, even though they are supposed to have a static wan ip, it does change from time to time.

What i would like to do is plug in a raspberry pi on the network and forward the DVR's ports somewhere accessable.

Im thinking of something along the lines of wireguard, but just for a single ip/port that i can tunnel over ngrok. Seems doable but i'm having trouble finding the proper terms to google. Port forwarding generally brings up router config, and tunnelling seems to expect you to be on the device who's ports you wish to access.

Any advice?

you are viewing a single comment's thread
view the rest of the comments
[–] Shadow@lemmy.ca 8 points 9 months ago* (last edited 9 months ago) (6 children)

Check out tailscale

You would configure your pi to be a subnet router it should be stupid easy to get going.

[–] dadarobot@lemmy.sdf.org 1 points 9 months ago (5 children)

Something ive noticed from using wireguard from my phone is my traffic across the board slows down significantly while connected because everything is routed back home.

With tailscale can the user be connected, and only have a specific ip/domain routed through it? I also dont have access to the dvr's internal system to run tailscale from it.

Anyway thanks for the lead, im reading up now

[–] socphoenix@midwest.social 4 points 9 months ago

There's a similar software called zerotier that only routes traffic you want across. You select an IP range (for instance 10.144..) and it gives your computer a new address. For my main computer let's say it's 10.144.168.128. The only traffic routed over the vpn is traffic addressed to that address. You can append the port to web traffic like https://10.144.168.128:8010/zm/index.php (zoneminder used as an example) and it would use the vpn for that connection but nothing else.

load more comments (4 replies)
load more comments (4 replies)