Define “open”…Where? In the router? I’m…having the issue where my router I’m trying to set is behind CGNAT, and effectively locks me out of opening anything in it. I’m going through this Tailscale process in the hopes of being able to open specific apps and ports in my CGNAT-ed server.
Question…I started working on this. How would you go about opening an SSH or RDP port (on some random port such as 12345) on a local machine, in a way that I can reach it via the tailscale IP?
…what support? They barely reply any queries people post in their google groups. If you go there you’ll see most people will try to reach them either due to servers down (the main issue at hand) or login issues which never get fixed (the longest standing issue, better create a different new subdomain) from what I’ve seen. I’ve also tried repeatedly to reach them regarding changing the token access, but with no luck. It’s a free service so I can’t complain, but the only support you actually will get is from other users, and for some scenarios that’s not quite enough.
EDIT: Oh wow right after posting this I just saw they actually replied regarding the SSO/tokens issue most people have (SSO failed due to the reddit snafu, you end up with just the token and no chance to do any further changes to your account again). This has been an ongoing issue for over two years, I just saw they finally replied (I think for the first time) a couple of weeks ago.
Thanks. I’m seriously considering also a paid domain, so it’s good to hear from your experience. I might go try some other free provider first though.
Does it matter?
No, it does not change, but why is this something of concern? The problem is duckdns DOES NOT REPLY providing DNS replies, not to my own servers, but to people outside looking for my servers by typing their address. Duck fails to provide a response to those queries, and users get timeouts. I can frequently replicate this with either dig or nslookup, from different machines, either inside my network or at random connections.
I managed today to run certbot to register 2 new subdomains that yesterday consistently failed with a long timeout during THE WHOLE DAY. Today the same certbot command on the same server ran straight at the first attempt.
So…yeah. Unreliable.
Great…thanks. I’m going to look them up.
Glad it works for you guys. Here it fails to respond at least once a week or so, and it can last one hour or more sometimes. It’s unpredictable. And makes the server look buggy.
A sample for measure…there’s a lot of these on reddit:
https://www.reddit.com/r/selfhosted/comments/1cyru6p/duckdns_dns_servers_down/
It will fail to resolve randomly, and then your services goes down. And you expend quite a while figuring out whatever might have failed until the typical “when in doubt, it’s DNS” pops up. This also applies when you’re trying to add/renew subdomains.
Just a sample…
It seems to frequently stop responding.
You only need to see how young Tom Scott looks in the video to know this is indeed very old news. They seem to have necroposted this thing from 10 years ago and posted it now without any reference about when the events happened, to make it seem relevant/recent.
I think this is the compound mentioned: https://en.m.wikipedia.org/wiki/Church_of_the_Pater_Noster
Thanks! But…where is the folder specified there? I can only see the temp client body path, but I’m not sure that’s where files will be uploaded.
Well I used to turn off the monitors and leave it running…And the last month I started actively suspending it, and the bill went down. I’m waiting to setup some sockets with smart power measuring features, and I’ll have more reliable data on power consumption…but I’m afraid I might need to wait a few days on these.
Lol…I didn´t consider that. What crypto can you mine that can give you at least some cents back? Sorry for the offtopic. Yeah I’m in the process of setting up some sockets with zigbee switches and power metering. I’ll install the one for the desktop soon, and start measuring more accurately. Is there a way to know which GPU are you using at any given time?
That would be if it ends in the news if a store uses it. I definitely can’t imagine people stop using their main grocery store off from a rumor like this.
This is great news! I have some small project I’ll be taking in a location with cgnat, I’ll be visiting it in November. This will be of great help, thanks so much!
My big question…will this work on blocked locations, as in a router running behind cgnat? No open ports. Does Tailscale solve this?
Thanks!
…but it can’t run both in your phone and in your computer, right? For that you need the desktop app (which is Windows only) or the web app, which linux apps encapsulate right?
What’s this about? I didn’t hear anything about it.
So…both cloudflare tunnels and tailscale funnels would require to have the service exposed to have a link with a tailscale-running server, right? As in, every single of my services/containers running via funnel would need their own tailscale install. If it’s a web service I can publish it via the nginx proxy-tailscale one, but if it’s just a service with no defined URL, just the port, I need a tailscale funnel in every single container of these, right? Or am I getting this wrong?
Thanks!