Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Putting Raspberry Pi Online with Caddy and SSH Tunnel

gist.github.com

Post reply on HN
Print view View original

61–70 of 157 posts

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#61

Post by viraptor »

nurettin wrote: post #23

I install a reverse proxy on every remote machine (raspberry pi or odroid) I manage. These machines are usually tucked behind someone's router, and it is hard to tell every router owner to forward the ssh port. When I install a reverse proxy, the machines can proactively tunnel right into a beacon machine whenever they are online and I can ssh into them from the beacon machine directly. I usually set up frpc as a ser…

As an alternative, you could put it on a public mesh VPN. I use ZeroTier for that so I don't have to host an explicit beacon.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#62

Post by nirui »

belzebalex wrote: post #21

An esoteric alternative is to host a Tor hidden service. Tor hidden services don't require you open ports, and you don't need a static IP address. Your residential IP is protected by the onion router, and the .onion domain name is free!

This is actually a cool idea and an example of thinking outside the box.

You run a Tor proxy (bind to 127.0.0.1:9050) on a server on the Internet, and then run a Tor hidden service inside your LAN.

Then, you acquire an .onion domain for the hidden service (running inside LAN), and configure the Tor proxy (running on a server on the Internet) to access the hidden service via the .onion domain (for example, use Nginx to reverse proxy the hidden service).

This should work. However, I imagine it could be quite a bit slower compare to "normal access", and requires extra steps to secure the transport connection between the hidden service and the proxy as you might not want to have everybody on Tor to be able to access that hidden service.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#63

Post by nurettin »

wil421 wrote: post #60
nurettin wrote: post #23

I install a reverse proxy on every remote machine (raspberry pi or odroid) I manage. These machines are usually tucked behind someone's router, and it is hard to tell every router owner to forward the ssh port. When I install a reverse proxy, the machines can proactively tunnel right into a beacon machine whenever they are online and I can ssh into them from the beacon machine directly. I usually set up frpc as a ser…

What are you using for your beacon machine? Do you have a static IP or a domain that your beacon uses?

Sure, I just use the smallest size hetzner or DO available. I point its IP to a subdomain just like the article described.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#64

Post by berkes »

lights0123 wrote: post #49
bpizzi wrote: post #47

I don't get it, I may be missing some context thought: why the author didn't go for running said webapps directly on the VPS in the first place? Why bother running it on the Pi and set up the tunnel (which is a nice hack in itself, I get that)?

Something that requires LAN connectivity: media library off a local NAS (e.g. Plex), generic storage (e.g. Nextcloud), or home automation (e.g. Home Assistant).

Interesting solution. Also as alternative to a VPN.

A VPN is often just too complex to set up, and also requires some hardware in your local network; though often your router will have that already. Off course a Rpi can act as VPN gateway/server.

But solving it by flipping the "servers" around and running the "appserver" in your network then tunneling it to remote seems a really neat hack to avoid going into VPN hell.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#65

Post by nurettin »

viraptor wrote: post #61
nurettin wrote: post #23

I install a reverse proxy on every remote machine (raspberry pi or odroid) I manage. These machines are usually tucked behind someone's router, and it is hard to tell every router owner to forward the ssh port. When I install a reverse proxy, the machines can proactively tunnel right into a beacon machine whenever they are online and I can ssh into them from the beacon machine directly. I usually set up frpc as a ser…

As an alternative, you could put it on a public mesh VPN. I use ZeroTier for that so I don't have to host an explicit beacon.

This looks nice, Free tier even supports up to 50 devices.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#66

Post by fareesh »

My personal assistant runs on my pi. When I'm out I can use its chat app to talk to it. The chat uses a cloud real-time db like firebase. If I want to connect I just ask it to setup a reverse proxy.

It can also turn on my machines via wake on lan. I'm quite happy with the setup since I can leave home anytime for long periods and always know I have access to the "home base".

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#67

Post by viraptor »

deccanchargers wrote: post #12

Look at https://h2o.examp1e.net/ H2O web server seems to be faster than nginx , litespeed and supports http1/http2/http3 . It's config file is yaml file. For HTTPS, i recommend https://acme.sh . It's very very easy and autorenews certificates using cron job.

When you're tunneling VPS to a home connection and rpi, the performance of the rev-proxy is not going to be a concern. Anything including a trivial script implementation of the proxy will be able to saturate this setup.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#69

Post by belzebalex »

nirui wrote: post #62
belzebalex wrote: post #21

An esoteric alternative is to host a Tor hidden service. Tor hidden services don't require you open ports, and you don't need a static IP address. Your residential IP is protected by the onion router, and the .onion domain name is free!

This is actually a cool idea and an example of thinking outside the box. You run a Tor proxy (bind to 127.0.0.1:9050) on a server on the Internet, and then run a Tor hidden service inside your LAN. Then, you acquire an .onion domain for the hidden service (running inside LAN), and configure the Tor proxy (running on a server on the Internet) to access the hidden service via the .onion domain (for example, use Nginx t…

I was more thinking of directly accessing the hidden service through the tor network (without a proxy on a VPS), which is acceptable if you're the only user.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#70

Post by alexellisuk »

voltagex_ wrote: post #15
alexellisuk wrote: post #14

Ww have a much easier way to do this with inlets - https://docs.inlets.dev/#/get-started/quickstart-tcp-ssh?id=...

>You will need an inlets PRO license, start a 14-day free trial.

Why do you view paid software as somehow invalid or lesser than (a bunch of open source tools hacked together), or freemium SaaS products mentioned?
Post reply on HN