Please help... what is a good way to establish a static IP for my homelab if the ISP doesn't provide it? (alien.top)

submitted 11 months ago by remivato69@alien.top to c/homelab@selfhosted.forum

28 comments fedilink hide all child comments

I have several machines that need direct in/out traffic through router port forwarding.
I have things setup already right now, using my domain name , pointing at my current static IP issued by the ISP.

But I will be transferring to another ISP and they don't offer static IPs. What's worst is the IPs issued are not only dynamic, but also private (so dynamic dns solution can't help)

So I need a way to maintain my exact setup (and port forwards) on the new ISP and I'm willing to pay for VPN like service if I have to. But I heard routing traffic through VPNs will slow down traffic which is my concern. I'm assuming VPN traffic is slow because of it having to hop around lots of proxy servers? If there was a VPN that just gives you static IP w/o proxy hopping, that would be best. I don't need the privacy, i just need the static IP and speed.

Looking forward to some helpful suggestions.

you are viewing a single comment's thread
view the rest of the comments

[-] kY2iB3yH0mN8wI2h@alien.top 1 points 11 months ago

There are VPNS that offer public IPs, some more enterprise grade VPNs can offer static IPs as well. But its not cheap.

Another way if traffic is mostly HTTP(S) based you can use cloudflare, seems to be the norm here.

Why are you moving to an ISP that does not support your needs? are you moving?

[-] remivato69@alien.top 1 points 11 months ago

The current ISP's service have been terrible.... frequent down times, that usually take 5-24 hours to resolve. It's unbearable. We were thinking of getting starlink too.

Yes all traffic i need to forward are http based... so that cloudflare thing, did u mean the cloudflared tunnel thing they have? if so, i think I will need to create different tunnels for each port I want to open right?

the other issue that I have is i need a fixed IP in order to access remote databases we use in development. It's a security thing (our remote database server whitelists connecting IP)

[-] parkrrrr@alien.top 1 points 11 months ago

I knew when you described being behind CGNAT that you were talking about Starlink. Starlink isn't necessarily a solution to your problems. I have it, and it's recently been pretty slow where I am, and their support is famously difficult to work with. If you have a terrestrial option, it's probably worth taking a good look at whether you really want Starlink. A few hours of reading in r/starlink may be able to help.

For your other issue, it seems like the best answer is for your employer to provide a VPN (a real VPN, hosted by the employer, not some janky BorgVPN thing whose only purpose is paying YouTubers to lie about what people use their service for.) That has the additional advantage of greatly simplifying the whitelist, which is good for security.

[-] remivato69@alien.top 1 points 11 months ago

hi
thanks for the insights

unfortunately employer wont be setting up VPNs anytime soon :(

this post was submitted on 28 Nov 2023

1 points (100.0% liked)

Homelab

371 readers

2 users here now

Rules

Be Civil.
Post about your homelab, discussion of your homelab, questions you may have, or general discussion about transition your skill from the homelab to the workplace.
No memes or potato images.
We love detailed homelab builds, especially network diagrams!
Report any posts that you feel should be brought to our attention.
Please no shitposting or blogspam.
No Referral Linking.
Keep piracy discussion off of this community

founded 1 year ago

MODERATORS

communick@selfhosted.forum

rglullis@communick.news