OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: theprez1980 on June 30, 2024, 04:08:26 AM

Title: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: theprez1980 on June 30, 2024, 04:08:26 AM
Hey All-

Switching to a new fiber ISP - and it only provides an IPv4 IP that's behind CGN.  As such, I can't use port forwarding towards my LAN devices.

I've heard (and read) on here that apparently there's a way to use a VPS's IP to have it passed to the LAN and then I could use port forwarding from the VPS's IP. 

I'm sure i'm using the wrong terms and am not exactly sure what to search for (reverse proxy? CGN's reverse?) but any walkthroughs or ideas?

Thanks
Title: Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: Monviech (Cedrik) on June 30, 2024, 09:09:46 AM
Why not use IPv6?
Title: Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: bartjsmit on June 30, 2024, 09:22:10 AM
or tailscale
Title: Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: BoodahsFever on June 30, 2024, 08:20:00 PM
Or Zerotier. That's available as plugin.
Title: Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: theprez1980 on July 01, 2024, 03:56:27 AM
Thanks - I'm assuming IPv6 is also CGN nat'd but I don't know yet.

I'll check out the other suggestions also - thanks
Title: Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: bestboy on July 01, 2024, 07:50:39 AM
IPv6 is not CGN'ed, coz unlike IPv4, there is no shortage of IPv6 address blocks.
Title: Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: Terminal on July 15, 2024, 11:56:14 PM
I too would like some details on how this is suppose to look.  Perhaps Prez and I have the same new Fiber ISP that isn't currently offering IPV6, although if they were, I would have to start a thread on what that is suppose to look like as well :/  If the other options talked about here work, I would be open to understanding what is involved there as well.  How do they get around the natted IP?  What are the pluses and minuses of each?  Do they require a separate service like VPS does?  All this just because a ISP is to cheap to buy a few extra ips.  What a shame.
Title: Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?
Post by: bartjsmit on July 16, 2024, 08:05:29 AM
Overlay networks like tailscale and zerotier use clients that make only outbound connections, thereby getting around the inability to port forward inbound traffic behind CGNAT.

You have to trust the network provider, although you can build a VPS to run headscale (the FOSS equivalent of tailscale) but then you have to trust the cloud provider instead ;)

Bart...