Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Putting Raspberry Pi Online with Caddy and SSH Tunnel

gist.github.com

Post reply on HN
Print view View original

141–150 of 157 posts

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#141

Post by sigmaprimus »

BHSPitMonkey wrote: post #105
3np wrote: post #10

Earlier quoted context omitted.

Privacy; keep data local, without exposing your residential IP.

Is exposing one's residential IP address such a bad thing? Is the threat model just that someone might wish to target you individually, and that they'll have better luck finding a vuln into your LAN if your services are listening directly on public ports?

I bet there are common non default port numbers that people subconsciously tend to use, it might be an interesting project to create a list file similar to a passwd list file to make a port scanner more efficient. GOD = 12345!? 1337

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#142

Post by anderspitman »

cft wrote: post #140
anderspitman wrote: post #132

Earlier quoted context omitted.

One downside is the actual steps are going to be different for every ISP/router combination. Tunneling is a universal solution, and provides other interesting tradeoffs.

but the upside is that you truly have decentralized internet

Do you? Is having your ISP terminate your public IP better than having DigitalOcean or Hetzner terminate it?

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#143

Post by antoniomika »

apitman wrote: post #117
antoniomika wrote: post #90

Up until about 2 years ago, I used to use the same method as you've listed! Actually, I still use this method, but do it a bit differently. I have a ZeroTier network setup to connect a VM and RPI for internal communication, then I use nginx with the stream module [1] in order to do SNI proxying down to the RPI from the VM over the internal ZT network. Why use the stream module vs the normal proxy module you might ask…

I do want to mention that of all the 30+ options I've researched, sish looks like one of the best. Even though in the end I decided to implement my own[0]. [0]: https://xkcd.com/927/

Heh, I appreciate that! And that's the exact reason I included the other options in my comment. There's a lot of good competition, I'm happy there's more :)

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#144

Post by antoniomika »

anderspitman wrote: post #135
varispeed wrote: post #104

Earlier quoted context omitted.

I've been using ZT for years. It's been absolutely amazing. It had some growing pains and often the network interface would hang, sometimes so badly that a full node restart would have been required, but these days it is super stable even under high load (talking about 1x-1xx TB per month)

Is it free at those usage levels? If not, how much?

It's free! You only get into having to pay for it once you hit a device threshold (I have a bunch of devices and haven't hit the limits). You can also run a controller yourself, therefore it's free even for super large networks.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#145

Post by floatingsmoke »

rexfuzzle wrote: post #93
floatingsmoke wrote: post #43

I use Cloudflare Argo Tunnel for this purpose and am very satisfied. It's easy to setup and if you have TLD on Cloudflare, the daemon(cloudflared) creates new A record for each host and creates a tunnel between your host and the nearest Cloudflare data center. You can also run multiple services on a single host. And all these connections are secure.

$5 per month and 10c per GB or am I missing something?

When you deal with tens of Raspberry Pis, require high availability, and have low traffic bandwidth Argo Tunnel makes really sense.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#146

Post by eximius »

athriren wrote: post #137
eximius wrote: post #103

I wish we were a little farther along so I'd have more to say, but we're hoping to solve this with https://hoppy.network/ . It's nothing you couldn't do yourself, but we host it for you so you don't have to. We host WireGuard servers which assign a stable public IPv4 and IPv6 on your device's WireGuard tunnel interface. As far as your device is concerned, it's like its tunnel interface is a publicly addressable conne…

about how far out do you think you are?

The core technology is in place and scales. We're drudging through the necessary steps of bank account, payment processor, account management, etc now.

If we were working full time on it, maybe a month? But we're not and the holidays are approaching. I'd expect Q1 2021.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#147

Post by tommyvan »

mobilio wrote: post #124
anderspitman wrote: post #108

I maintain a list of solutions to this problem: https://github.com/anderspitman/awesome-tunneling . There are a surprising number of tools that all do essentially the same thing, and it's often hard to tell how they're different from the other 30 options. Making a really good solution to this problem has been the focus of my free time for the past month since I wrote this comment[0]. The project I'm working on: * 100…

THANK YOU! I still miss Serveo because this was easiest tunnel solution that "just works!"

I've seen a few servo refugees recently land on my service, https://localhost.run/ I didn't get to try serveo before it ended but I _think_ I do something similar, "ssh -R 80:localhost:8080 ssh.localhost.run" will give you an internet accessible address tunneled to localhost:8080.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#148

Post by tommyvan »

A few years ago I wrote a custom SSH server to do exactly this, but for webhook development rather than tunneling to a pi. other peeps found it useful so it's turned into a bit of a side project. If you want to have a go before spending time on setting up your own server run "ssh -R 80:localhost:8080 ssh.localhost.run" to tunnel to localhost:8080, you'll see an internet accessible domain returned to your terminal.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#149

Post by tommyvan »

tommyvan wrote: post #147
mobilio wrote: post #124

Earlier quoted context omitted.

THANK YOU! I still miss Serveo because this was easiest tunnel solution that "just works!"

I've seen a few servo refugees recently land on my service, https://localhost.run/ I didn't get to try serveo before it ended but I _think_ I do something similar, "ssh -R 80:localhost:8080 ssh.localhost.run" will give you an internet accessible address tunneled to localhost:8080.

does anyone know what happened to serveo BTW? As happy as i am to welcome peeps onto localhost.run it's sad to see peeps in this space disappear, especially peeps that like SSH as much as I do. I read a medium article about serveo after it disappeared that suggested you could choose your own stable subdomain. localhost.run used to work like this but I got hammered by phishing sites, almost got shut down by my registrar and my hosting provider. I wonder if that was it? Stopping phishing is, by far, the thing I've had to do the most work on.

Re: Putting Raspberry Pi Online with Caddy and SSH Tunnel

#150

Post by mobilio »

tommyvan wrote: post #149
tommyvan wrote: post #147

Earlier quoted context omitted.

I've seen a few servo refugees recently land on my service, https://localhost.run/ I didn't get to try serveo before it ended but I _think_ I do something similar, "ssh -R 80:localhost:8080 ssh.localhost.run" will give you an internet accessible address tunneled to localhost:8080.

does anyone know what happened to serveo BTW? As happy as i am to welcome peeps onto localhost.run it's sad to see peeps in this space disappear, especially peeps that like SSH as much as I do. I read a medium article about serveo after it disappeared that suggested you could choose your own stable subdomain. localhost.run used to work like this but I got hammered by phishing sites, almost got shut down by my registr…

Serveo author is Google employee and I THINK that there was some issues that service caused to him and his job.

As i said - I THINK!

Post reply on HN