Hi, I live in Germany and only have public IPv6. My address changes only very, very rarely and has never changed in the time I’ve been self-hosting.

I also have a very small, pretty cheap VPS with static IPv4/IPv6 – which would seem like a great fit for some sort of tunneling/proxy setup. Now comes the question: What/how should I use it? I would like to not have the additional latency for IPv6 enabled hosts, can I just setup a reverse proxy for IPv4? Would Tailscale work for my usecase, what are some resources you found useful when using it?

Currently, I’m just hosting everything IPv6-only and hoping my address never changes, but that does not work for everyone, as especially many new buildings with fiber optic connections still only have IPv4 (strangely).

  • spanac@lemmy.zipEnglish
    2·
    13 days ago

    I have a similar situation, where I only get a public IPv6 prefix. I ended up renting small vps at netcup and installed OpenVPN and ha-proxy. My home router connects to the VPS’s public IP and I do port forwarding for the services I need, or use the proxy.

    Initially I setup SNAT for my web server (otherwise replies were going out the wrong interface) and that meant you don’t see the public IP of the connecting client in your access logs.

    Recently I switched to using ha-proxy which does tcp level proxying and works well with ports 80 and 443 and Traefik, which i use to expose my docker containers.

    My connection chain looke like vps -> ha-proxy -> OpenVPN -> port forward to Traefik -> reverse proxy to the final service. It’s not a fast server, and I didn’t measure latency, but it’s for sure not small.

    As others have mentioned, ha-proxying to your IPv6 might be an interesting solution, and I think I will also try it out.

  • randombullet@programming.devEnglish
    1·
    19 days ago

    Ionos.de has a €1 a month VPS

    I think 1 core, 1gb ram, and 10gb.

    Use either caddy or Nginx proxy manager. Both are easy to setup. Also both are dockerized.

    I use Tailscale as my tunnel.

    Total latency is about 70-90ms for me.

  • death916@lemmy.death916.xyzEnglish
    0·
    20 days ago

    Tailscale is amazing. When i first started self hosting i tried a bunch of things to avoid a companies solution but tailscale just works perfectly and form what they say in interviews they dont intend to change the free tiers. Its also open source and there’s headscale so eventually you could not rely on the company at all.

    • Jason2357@lemmy.caEnglish
      1·
      19 days ago

      I switched from Tailscale to headscale, and I still would suggest Tailscale to anyone. It’s just really done well and they seem to actually love that self-hosters and hobbyists use their stuff.

  • thelittleblackbird@lemmy.worldEnglish
    0·
    20 days ago

    Small and stupid question.

    Why don’t use a ddns client to update your ipv6 evytime it changes? With a ttl of a minute your shouldn’t be able to see any downtime…

    I (genuinely) thinks you are trying to solve a small problem in the complicated and hard way… M

    • Keelhaul@sh.itjust.worksEnglish
      0·
      19 days ago

      Plenty of IPv4 only networks still exist from which you would not be able to access the services. I am in a similar situation as OP with my offsite address being IPv6 + CGNAT IPv4 and my own address being IPv4 only.