So I was looking into getting port forwarding set up and I realized just how closed-off the internet has gotten since the early days. It’s concerning. It used to be you would buy your own router and connect it to the internet, and that router would control port-forwarding and what-have-you.
Now, your ISP provides your router, which runs their firmware, which (in my case) doesn’t even have the option to enable port forwarding.
It gets worse - because ISPs are choosing NATs over IPv6, so even if you install a custom firmware on your router without it getting blacklisted by your ISP, you still can’t expose your server to the internet because the NAT refuses to forward traffic your way. They even devise special NAT schemes like symmetric NAT to thwart hole punching.
Basically this all means that I have to purchase my web hosting separately. Or relay all the traffic through an unnecessary third party, introducing a point of failure.
It’s frustrating.
I like to control my stuff. I don’t like to depend on other people or be in a position where I have to trust someone not to fuck with my shit. Like, if the only thing outside my apartment that mattered to my website was a DNS record, I’d be really happy with that.
You must log in or register to comment.
Yes CGNAT is used quite a lot, but consider 95% of customers don’t care what their public address is and that “saves” the carrier address space.
We are the 5% that do care and if you call your ISP they likely have an option to exclude you from cgn and get an actual public IP.
It’s really shitty. My isp offers a static ip plan but it costs a lot more, so I try using tailscale and it works ok. It’s a shame though
why not bridge the router and use your own?
the router doesn’t have one?
which ISP is it?
No matter how much you think you know, there’s always something everyone knows that you’ve never heard of…
That said, if bridge mode is something that you can enable in the config (going to 192.168.0.1 in web browser and all that) then it’s not possible.
It’s through China Mobile
You could get an ONU like this
https://www.aliexpress.us/item/3256804134894710.html
Use it to clone every bit of authentication from ur current ONU to it, the realtek chip in it is very customizable.
sounds like his router is locked down, and even then, if the isp puts him behind nat, there isnt much he can do on his side even if he could theoretically forward those ports.
yes, cgnat is very common in many countries due to IPv4 shortage, bypassing the ISP Router and using your own along with a self hosted VPN Server (for China, Hong Kong or Tokyo works great) is the best choice.
ipv6 is nice to use too if they dont also NAT it (which looks rare?)
And this is why I’m unlikely to change isp. I have a /29 ipv4 block and /48 ipv6 block. No extra charge. Grandfathered features from over a decade ago.
HOLY SHIT YOU HAVE A /29 IPV4 BLOCK???
That’s like having a change jar with copper pennies or something, nice
Yep. The ISP doesn’t offer it any more. They stopped, I think when RIPE officially “ran out” of new net blocks. But I’ve moved address twice so far and have kept the allocation. Well, on the last move they messed up and gave new a new single IP. I complained, and they asked why it matters so much to have my old IP. I pointed out I had a netblock, and they fixed it up pretty quickly.
Pretty soon, full fibre will be in my area and available on the same ISP. So, hoping for a smooth transition to keep it for a bit longer.
How does it feel hoarding IPs from 7 other people who want one?
You can’t get your own router?
You can. But it then has to route through their modem+router single piece unit.
E.g. I have my own router which handles everything I need. But I switched ISPs recently to save 70$ per month, and the new company router has parts of its functionality, like turning off the wifi, built into their smartphone app and disabled in the admin panel.
Also the username and password for the unit is, by default, admin/admin. In 2023.
Sounds like a (somehow even more) shit isp. I just tapped the “bring my own” when I signed up, and bought myself a modem/router combo at best buy.
Might not be ideal but perhaps simpler, do you have the ability to upgrade your service to business class? Usually the business tiers allow such things and they will support self hosting and open up the ports for you if you ask. It will likely cost more for the same speed you currently have. Another option to consider
Standard IPv4 NAT or CGNAT?
Are you using their modem AND router? Or just their modem? If it’s a modem router combo, can you place it in bridge/passthrough mode?
Even if it’s CGNAT and no bridge mode, their are solutions available.
Are you looking to host private services like NextCloud? Or public services like a website?
Apologies if you’ve answered this elsewhere but I’m assuming there’s a reason you haven’t bought your own router?
Is that possible with something like T-Mobile Home Internet?
idk that’s why I asked
I had a fun little issue a while back where my isp replaced our fiber modem to one that didn’t allow for port forwarding. The settings were missing but when I set up dmz host on that to allow our equipment to work again, I noticed it was behind some nat in their system. I found out I could call them to get functionality restored for a fee, but instead I plugged in the old box and still keep an external ip with port forwarding enabled and no nat. To be honest the old one has been a lot less stubborn as it doesn’t drop every 10th packet on the network. I switched back about 6 months ago, and I’ve not had any issues, so we’ll see when they call demanding me to plug in the new one. Their explanation for switching systems was that their old one wasn’t powerful enough for gigabit speeds, even though both have interfaces for gigabit sfp. After some testing, the old one was more capable and stable at those speeds. I assume they wanted to switch systems due to some licensing thing, or to get more money from the .5% of people who care about these features.
I don’t know what you mean by ISPs in the US don’t have NATs. They most certainly do NAT at the gateway device. But they also typically provide a way to DMZ to your own router instead. I don’t have to deal with double NAT simply because I effectively have my ISP gateway in bridge mode (forwarding all traffic to a specific device, in this case, my personal router).
Note: I have gigabit FTTH from AT&T. I left cable internet the moment fiber service was made available.
Is your service fiber? Is your router a combined ONT and router? If its not and you have an ONT serving ethernet to the router, you can just plug your own router in.
You said it’s through china mobile so is it a cell modem/router?
Just checked, it looks like it’s fiber. Definitely has something plugged into the wall anyway - I’m kinda afraid of unplugging it and ruining my internet access.
I bought my own cable modem and router for less than what my ISP would charge to rent them to me. They control nothing on my end.
Same, never use their equipment if possible, cheaper and you are in control.
Are you trying to offer a port for peer sharing (XDCC/BT)? I’ve never tried using it like this but I think Tailscale Funnel could work.
It’s a sort of reverse VPN, I guess you could call it. Tailscale maintains the public IP and when someone connects to your advertised port they tunnel it to you through (encrypted) WireGuard. It passes through NAT because connections are outgoing to their servers.
The catch is that wireguard is easily detectable through deep packet inspection so if your ISP is a real asshole they can kill the connections, but if they go that far then NAT traversal is the least of your worries.
What do you need to do, why do you need a public IP?
Well, I don’t need it, not really. It’s just I’m finally in a position where I’m not stressed about things like rent and healthcare, and I’m realizing I wanna fuck around with hosting my own websites. Possibly a lemmy instance, I was toying with the idea of developing a P2P social networking protocol that federates with lemmy. But also the idea of building my own websites so I’m not dependent on others for my income, or just making it easier for people to download stuff that I’m the only seeder of.
Definitely not a need. My rent is paid, my food is healthy, healthcare is cheap. So now I can worry about stuff like this that ultimately doesn’t matter
Use cloudflare tunnel.
