Live data from Hacker News

Putting Raspberry Pi Online with Caddy and SSH Tunnel

gist.github.com

71–80 of 157 posts

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#71

Earlier quoted context omitted.

>You will need an inlets PRO license, start a 14-day free trial.

Why do you view paid software as somehow invalid or lesser than (a bunch of open source tools hacked together), or freemium SaaS products mentioned?

I don't, necessarily, but it might have been nice to be up front in your comment that you were advertising for your company.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#72

An esoteric alternative is to host a Tor hidden service. Tor hidden services don't require you open ports, and you don't need a static IP address. Your residential IP is protected by the onion router, and the .onion domain name is free!

This is what I've always done when I was a poor student and didn't have a public IP.

The latency can be painful but it's way better than nothing.

I will say you should probably be careful about running a webserver on TOR. Almost all my machines have a basic web server just for copying static files to windows hosts I don't want to give my password to. People would find these on TOR and then find my resume, I got plenty of emails asking to set up "hidden sites on the dark web for sharing pictures."

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#73
post #40

An esoteric alternative is to host a Tor hidden service. Tor hidden services don't require you open ports, and you don't need a static IP address. Your residential IP is protected by the onion router, and the .onion domain name is free!

> the .onion domain name is free! I mean, you’re technically correct, but isn’t this kind of like saying that the .local TLD is free of charge? It’s “free” because it’s not a part of the “normal” internet.

.local isn't part of a global namespace, it's part of a local namespace.

Sure you don't get an interesting name but you do get one.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#74
post #73
post #40

Earlier quoted context omitted.

> the .onion domain name is free! I mean, you’re technically correct, but isn’t this kind of like saying that the .local TLD is free of charge? It’s “free” because it’s not a part of the “normal” internet.

.local isn't part of a global namespace, it's part of a local namespace. Sure you don't get an interesting name but you do get one.

.local isn’t the best comparison to .onion

.oarsinsync is probably a better comparison. It’s not explicitly scoped anywhere, and it works nicely in my oarsinsync bubble, much like .onion works nicely in the ToR bubble.

In both cases, you need to connect using some kind of tunnelling protocol to connect into another network.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#75
post #47

I don't get it, I may be missing some context thought: why the author didn't go for running said webapps directly on the VPS in the first place? Why bother running it on the Pi and set up the tunnel (which is a nice hack in itself, I get that)?

Something that requires LAN connectivity: media library off a local NAS (e.g. Plex), generic storage (e.g. Nextcloud), or home automation (e.g. Home Assistant).

Just VPN the VPS? At least my router supports openvpn right on the device. Generates the config for you and everything.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#76
post #72

An esoteric alternative is to host a Tor hidden service. Tor hidden services don't require you open ports, and you don't need a static IP address. Your residential IP is protected by the onion router, and the .onion domain name is free!

This is what I've always done when I was a poor student and didn't have a public IP. The latency can be painful but it's way better than nothing. I will say you should probably be careful about running a webserver on TOR. Almost all my machines have a basic web server just for copying static files to windows hosts I don't want to give my password to. People would find these on TOR and then find my resume, I got plent…

If it's just for personal use, you can and should use client certificates to ensure that you're the only person who even can connect.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#77
post #72

Earlier quoted context omitted.

This is what I've always done when I was a poor student and didn't have a public IP. The latency can be painful but it's way better than nothing. I will say you should probably be careful about running a webserver on TOR. Almost all my machines have a basic web server just for copying static files to windows hosts I don't want to give my password to. People would find these on TOR and then find my resume, I got plent…

If it's just for personal use, you can and should use client certificates to ensure that you're the only person who even can connect.

Then I would have to generate certificates and leave them on random people's machines. Plus when I'm sharing things with other people I can't just send them a link, I have to explain how to install the certificate into their browser (or OS in some cases.) On top of all that openssl is very complex and has had serious CVEs before, I'd feel a lot less comfortable exposing that to TOR than a smaller web server.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#78
post #73
post #40

Earlier quoted context omitted.

> the .onion domain name is free! I mean, you’re technically correct, but isn’t this kind of like saying that the .local TLD is free of charge? It’s “free” because it’s not a part of the “normal” internet.

.local isn't part of a global namespace, it's part of a local namespace. Sure you don't get an interesting name but you do get one.

What I’m trying to say is that if you’re going to have to install additional software, or make additional configuration on the requesting node, it doesn’t really matter if it’s .local or .tor or whatever, because the only reason it works is because you did that extra work: and when you’re in that situation, it doesn’t really make sense to compare it to “paid” domains because the reason you pay for a domain is just that, you want it to work everywhere without additional configuration.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#79
I did something similar with Wireguard but wasn't able to get it to do what I need. I'm trying to give my VPS access to other computers on my home network. The Pi and my VPS can communicate with each other just fine. For some reason the pi won't forward any packets from the VPS, they just seem to drop.

I've scoured all config that I could think of, iptables, network adaptors, Wireguard, but can't find the cause. Anyone encounter this or have a place to point me for help?

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#80

I install a reverse proxy on every remote machine (raspberry pi or odroid) I manage. These machines are usually tucked behind someone's router, and it is hard to tell every router owner to forward the ssh port. When I install a reverse proxy, the machines can proactively tunnel right into a beacon machine whenever they are online and I can ssh into them from the beacon machine directly. I usually set up frpc as a ser…

As an alternative, you could put it on a public mesh VPN. I use ZeroTier for that so I don't have to host an explicit beacon.

zerotier is nice, but I have migrated to tailscale. Its based on wireguard and seems even better performance wise.
Post reply on HN