Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Free DDNS with Cloudflare and a cronjob

github.com

Post reply on HN
Print view View original

61–70 of 202 posts

Re: Free DDNS with Cloudflare and a cronjob

#61

Post by WarOnPrivacy »

stkdump wrote: post #56
WarOnPrivacy wrote: post #51

Earlier quoted context omitted.

> Since my IP hardly changes... Same. Our wireline ISPs used to issue new public IPs every 1-12 weeks. Now it's more like 6 mos to never. I'm thinking this is due to pressure from IPv4 exhaustion and the rise of easy DDNS. There's also an overall shift - from using tech to protect profit-generating services to using lobbyists. To share an anecdote from the before times: I was once trying to setup a VPN endpoint on a…

For me it changes reliably on every reconnect, but there are no forced reconnects, and I now have my router not restarting basically ever since I am on openwrt and am done with setting everything up.

> For me it changes reliably on every reconnect,

What kind of reconnect?

Re: Free DDNS with Cloudflare and a cronjob

#63

Post by nrabulinski »

blfr wrote: post #62

I wanted to do this a long time ago but I wouldn't trust my router with a Cloudflare API key. Paranoid or is there a way to limit that key to one domain or, even better, one DNS entry?

Yes you can generate a key which, for example, only allows you to edit DNS of a specific domain

Re: Free DDNS with Cloudflare and a cronjob

#66

Post by tomschlick »

noname120 wrote: post #20
gothink wrote: post #16

Earlier quoted context omitted.

I feel like it's worth mentioning icanhazip.com [0] as well, since it's now run by Cloudflare [1]. Until recently switching to a custom CF worker, that's been by go-to for ages. [0]: https://www.icanhazip.com/ [1]: https://major.io/p/a-new-future-for-icanhazip/

Does Cloudflare have a history of sunsetting products they've bought? Acquisitions by Google, Apple, Meta, etc. are yellow flags that the product may cease to exist soon. I wonder if Cloudflare has a better track record in that regard.

Not that I'm aware of and this is likely now just a cloudflare worker that returns the IP they already have. I would imagine maintenance is basically zero as its feature complete.

Re: Free DDNS with Cloudflare and a cronjob

#68

Post by KennyBlanken »

vladvasiliu wrote: post #45
noname120 wrote: post #17

Earlier quoted context omitted.

There are some limitations such as: – TLS termination mandatorily happens at Cloudflare (i.e. your traffic is mitm'ed). That's because this free product is meant as a gateway drug (aka a loss leader) to Cloudflare's WAF/Anti-DDOS products (which require TLS termination to happen on their side for technical reasons). – Other TCP protocols (including SSH) require every client to run the software too. So if you were thi…

> – TLS termination mandatorily happens at Cloudflare (i.e. your traffic is mitm'ed). That's because this free product is meant as a gateway drug (aka a loss leader) to Cloudflare's WAF/Anti-DDOS products (which require TLS termination to happen on their side for technical reasons). But on the flip side, this allows you to have a nice certificate on your outside connection without having to fiddle with letsencrypt or…

If someone finds LetsEncrypt challenging, they don't have sufficient network andsystem administrator skills to be running a private, public-facing web server. They should be running tailscale.

Re: Free DDNS with Cloudflare and a cronjob

#69

Post by clwg »

A bit of a tangent, but something like PowerDNS authoritative server comes with an API[0] that can be leveraged for similar functionality to what Cloudflare provides.

Decentralization of the internet has to start with Authoritative DNS. I know it's not free to host an authoritative server like this on a VPS, and there are DDoS considerations. But the flip side is that DNS is a metadata protocol and contains a wealth of information that anybody privacy focused should think twice about. It's also an incredibly powerful and important protocol to understand.

[0] https://doc.powerdns.com/authoritative/http-api/index.html

Post reply on HN