[arm-allstar] ASL behind CGNAT.

[Michael Champion]

Has anyone used AMPRNet VPN?

-Michael


-----Original Message-----
From: ARM-allstar <arm-allstar-bounces at hamvoip.org> On Behalf Of David McGough via ARM-allstar
Sent: Friday, December 23, 2022 2:05 AM
To: Carl Swanson via ARM-allstar <arm-allstar at hamvoip.org>
Cc: David McGough <kb4fxc at inttek.net>; Carl Swanson <cswa20026 at gmail.com>
Subject: Re: [arm-allstar] ASL behind CGNAT.


Carl,

Some variety of VPN is the best choice for solving NAT issues.

Zerotier is probably the easiest VPN to setup these days.  There are many other great choices, too, OpenVPN and WireGuard being favorites.  OpenVPN, using pre-shared static keys, is probably the second simplest to setup.

Note that Zerotier does not require any of the member endpoints to use static IP addresses nor does it need some type of dynamic DNS mechanism to advertise the current gateway IP address, if the gateway is on a dynamic IP (perhaps like home DSL or cable, etc).

Socks5 *might* also work, however, since this protocol isn't natively supported by AllStar (nor ssh, apache, etc), setup will require jumping through multiple networking hoops, using client and server endpoints!  
This approach wouldn't be on my prospect list at all, unless it was a required lab exercise in college, conceived of by some TA wanting to inflict suffering on the students!!!! LOL


73, David K4FXC




On Tue, 20 Dec 2022, Carl Swanson via ARM-allstar wrote:

> Hive mind,
> 
> What is the general consensus for exposing nodes that sit behind CGNAT?
> Yeah, I know "getting a real IP address" is the proper option, but 
> what has the experimenter in you used that worked well and was persistent?
> 
> I'ver looked at VPN solutions, but most of them will only expose 
> HTTP/HTTPS on port 80/443, assuming you're using it for streaming whatever.
> 
> Am I really looking for a SOCKS5 proxy?
> 
> I'm experimenting with a Cloudflare tunnel right now to see if I can 
> get that to work, but the initial results aren't too promising (or I'm 
> just too ham handed with the config)...
> 
> What say y'all?
> 
> 73,
> 
> Carl, K6CRS
> _____________________________________________
> Carl Swanson
> cswa20026 at gmail.com
> _______________________________________________
> 
> ARM-allstar mailing list
> ARM-allstar at hamvoip.org
> https://u20598202.ct.sendgrid.net/ls/click?upn=09V9cxkRtbTRgot8gmcwxsnX5hn7TU325G8oi6-2B-2B68-2BwhGiBBSG1LJ7LE7aAp27FZgqyhqVoEw-2FwyPvjgnS0NmHGZydrH6Mn-2BbZ0uONMd-2BU-3DvoKP_suu-2Bumw0rk7NlPwUBUSara-2FvYpHbz7XPaK8euZ-2BoXZL-2FDCW5EZdSVtwFzRxIEvTiTbbsJOlKaaXFnVYHZgDKnGwt8U-2B8tWcLhaKdbvXJWSMlh7M21nCtOf2IzNccibtrpgfa7FNySYN31dGSo-2BWdTOIxjI8Np-2BtJ-2B8YfOwDATsXLtsyXOenD44iSWVag-2Fs7lQJhSLUt2Zz6EaVy3CyFPYg-3D-3D
> 
> Visit the BBB and RPi2/3/4 web page - https://u20598202.ct.sendgrid.net/ls/click?upn=09V9cxkRtbTRgot8gmcwxp2v7e6FoqkdrbWrMgmY-2B-2Fc-3Dh4B__suu-2Bumw0rk7NlPwUBUSara-2FvYpHbz7XPaK8euZ-2BoXZL-2FDCW5EZdSVtwFzRxIEvTiTbbsJOlKaaXFnVYHZgDKnJ-2FVi0BzexALnY94yAbPL48fk1ZZDhB9eaRPpgR4mqQc8JRVSgAojiG-2F8Yp76S-2Fqu5XJaqPGamlPUO0p0MLSZAQM1717S80I9YgYPwLR1ETuF75N6aovWVTiK8AIz8ZzzA-3D-3D
> 

_______________________________________________

ARM-allstar mailing list
ARM-allstar at hamvoip.org
https://u20598202.ct.sendgrid.net/ls/click?upn=09V9cxkRtbTRgot8gmcwxsnX5hn7TU325G8oi6-2B-2B68-2BwhGiBBSG1LJ7LE7aAp27FZgqyhqVoEw-2FwyPvjgnS0NmHGZydrH6Mn-2BbZ0uONMd-2BU-3D95eT_suu-2Bumw0rk7NlPwUBUSara-2FvYpHbz7XPaK8euZ-2BoXZL-2FDCW5EZdSVtwFzRxIEvTiTbbsJOlKaaXFnVYHZgDKnOCxpmvW7IisyzMucqBXVnE86R2DCc-2FJJWOm5ZWlCTghdScwocvPHG30-2FWTvS3-2Bcnf06upVZHhTEFCPXqIZEuhah1mH-2FsIIKRa1-2FRoaMolK6ZEcxmHBbZ1N5yskAfomcXg-3D-3D

Visit the BBB and RPi2/3/4 web page - https://u20598202.ct.sendgrid.net/ls/click?upn=09V9cxkRtbTRgot8gmcwxp2v7e6FoqkdrbWrMgmY-2B-2Fc-3DftXd_suu-2Bumw0rk7NlPwUBUSara-2FvYpHbz7XPaK8euZ-2BoXZL-2FDCW5EZdSVtwFzRxIEvTiTbbsJOlKaaXFnVYHZgDKnAA7J7LHv9DfP4o0vl9xONOyxmcdoOE-2FEy3tw2LD1baQ7j3pga6MUFp8zTFjbKO79gKy-2BlLXR76W8UGaFQg-2FZo3yRqOE-2BSqU4fLwGY-2FqDwBMp1ColY5-2FQtRCS6WeDCqDQQ-3D-3D