25

I got a homelab, at the moment I am only running some local stuff and tailscale to reach my stuff remotely.

I can use tailscales ddns, but I would like a real domain. Is there a domain registrator that works with dynamic ips? Or do I need to use a CNAME instead of A record?

top 50 comments
sorted by: hot top new old
[-] erre@feddit.win 10 points 3 years ago

It really depends on the company that you use to manage the domain's DNS. As long as they have an API to update DNS records..

For example, I can have my domain at Porkbun and have its DNS managed at Cloudflare. Cloudflare allows updating DNS records via API..so there's programs to update it. Some routers even support it.

Worst case, you can set up a service like duckdns and have your domain, via cname, point to the duck DNS subdomain.

There's options.

[-] constantokra@lemmy.one 5 points 3 years ago

Porkbun also has an api for updating records.

[-] singinwhale@lmy.singinwhale.com 1 points 3 years ago

I think using the cloudflare API is the way to go. You could probably set up an internal service that translates your home router's dyndns request to a cloudflare API call.

[-] Cqrd@lemmy.dbzer0.com 1 points 3 years ago

Only if you had root access to your router. It’s a lot easier to write or find a very simple update script and schedule it to run every now and then via crontab.

[-] singinwhale@lmy.singinwhale.com 1 points 3 years ago

The daemon script is simpler, true. but usually you can just point your router at some dyndns URL and you could put an internal IP for that.

[-] wiox@compuverse.uk 5 points 3 years ago

All domains works with Dynamic IPs - it all depends on what DNS-provider you use :) Provider like Cloudflare ( I do not recommend Cloudflare) and afraid.org both offer dynamic DNS.

[-] gears@sh.itjust.works 6 points 3 years ago

Do you recommend afraid.org?

[-] wiox@compuverse.uk 4 points 3 years ago

Afraid.org is great :) I do recommend

[-] Derkis@rammy.site 4 points 3 years ago

Why don't you recommend Cloudflare?

[-] wiox@compuverse.uk 2 points 3 years ago

It is a giant MITM proxy, and whoever who has access to their logs have the potential to gain a lot of control

[-] sloppy_diffuser@sh.itjust.works 1 points 3 years ago

Don't have to use their proxy. My gateway router uses cloudflare to set the IP via the API and I just use self-signed certificates. A record resolves to my gateway, not some cloudflare server.

They also do a lot of work in the privacy space. Encrypted Client Hello to protect SNI came from them.

If you use any company for TLS termination they can MITM (e.g. AWS certificate manager).

[-] cnx@slrpnk.net 1 points 3 years ago

Its market share defeats the point of self-hosting.

[-] Hemlig@lemmy.world 1 points 3 years ago

Yea, that's right. What I was looking for was like one stop shop. Where I can pay for my domain and dns needs. My current domain registrator does not have dynamic dns, so I have to use a CNAME from another place with a ddns.

[-] wiox@compuverse.uk 1 points 3 years ago* (last edited 3 years ago)

Since your name is Helig, I assume you are from the Nordics. Loopia has support for dynamic DNS.

[-] terribleplan@lemmy.nrd.li 4 points 3 years ago* (last edited 3 years ago)

There are many ways to update dns automatically, I have used this container in the past. You could probably even write a bash script/cron job that checks your IP and updates it with curl depending on your DNS provider.

If you are already running tailscale you may be interested in using a funnel, which lets you accept and route internet traffic to your tailnet. I don't use tailscale so can't comment on how good/bad/useful this is.

You could also run some sort of service like frp from some remote box (like a VPS in DO/Linode/etc). This or the funnel lets you not expose/advertise your home IP address if that is a consideration.

[-] erre@feddit.win 1 points 3 years ago

Oooh thanks for the tip about frp. Interesting.

[-] redcalcium@c.calciumlabs.com 1 points 3 years ago

I usually use autossh to establish a persistent port tunneling but sometimes got frustrated with the performance of the encrypted tunnel for some use case. Sometimes I don't need encryption, but need to saturate my nic. frp seems to fit this use case.

[-] terribleplan@lemmy.nrd.li 1 points 3 years ago

I actually just migrated things to a setup that is pretty neat using FRP: I run frps on 2 Linodes in the same datacenter and have set up IP sharing for failover between them (which is a neat feature Linode, Vultr and probably a few others offer), and then I run 4 frpc's, two for each frps in case one of them breaks somehow. Lots of redundancy without all that much effort.

[-] erre@feddit.win 1 points 3 years ago

It sounds pretty awesome. Just wondering if adding additional complexity to the setup is worth it to obfuscate my home IP. Easily setting up redundancy is a good feature in that regard though.

[-] techviator@kbin.social 3 points 3 years ago

Cloudflare, Porkbun, Namecheap and many other registrars offer dynamic DNS via API or a ddns client very easy to setup.

[-] frankblack@lemmy.world 2 points 3 years ago

CloudFlare ZT tunnels coupled with an Azure AD. Work’s amazingly with their containers to keep the tunnel alive.

load more comments (3 replies)
[-] epchris@programming.dev 1 points 3 years ago

I use cloud flare DNS and it has support for dynamic IPs, my current setup is through a plug-in in my PFSense router

[-] troplin@kbin.social 1 points 3 years ago

ZoneEdit.com has a free plan with dynamic DNS for at least one „real“ domain (domain registration not included). It‘s not the most user friendly UI but super powerful. You can pretty much add any DNS record you like.

[-] manitcor@lemmy.intai.tech 1 points 3 years ago

Does your ISP support IPv6?

[-] Perhyte@lemmy.world 3 points 3 years ago

Silly as it is, many ISPs hand out dynamic IPv6 prefixes that may change once in a while. Or "dynamic" prefixes that never seem to change (but are not guaranteed never to change).

The reason is of course that they like being able to charge extra for static IPv4 addresses, and they see no reason to get rid of that revenue source for IPv6.

[-] Hemlig@lemmy.world 1 points 3 years ago

I think I can ask them about it. Never really used ipv6. Maybe that's even better. Then I can maybe use more than one IP even. I don't know how the ISPs deal with it. Do I only get one for my router, or can I get a bunch of them.. hmm

[-] manitcor@lemmy.intai.tech 4 points 3 years ago

with IPv6 you are able to address your internal network devices directly without port forwarding. Just make sure your router and other gear support it so you have everything you need.

[-] lemba@discuss.tchncs.de 3 points 3 years ago

This is the way.

[-] Hemlig@lemmy.world 2 points 3 years ago

Yea, my stuff supports it. But I never checked out how the ISPs is dealing with it. I will check it out!

[-] cnx@slrpnk.net 1 points 3 years ago

If you have a static IPv6 address you can host your own authoritative DNS locally and use it for IPv4.

load more comments
view more: next ›
this post was submitted on 04 Jul 2023
25 points (96.3% liked)

Selfhosted

62284 readers
317 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS