I just switched to fiber internet and immediately I am having issues with services like Plex and Wireguard outside my network. When I looked into it further, I find that the fiber provider is using CG-NAT with 100.x IPs and shared public IPs.

 

From what I gather, port forwarding either manual or UPNP will not work in this setup. Is there any other way to route connections in that is free? I've been doing some reading on potential reverse proxy. Would really appreciate some suggestions/guidance.

 

Thank you!

Your provider should have offered you a public IPV6 address/prefix.

You need to switch everything to IPV6 then.

In case of Dockers it will become tricky because V6 is not really supported well yet. Unraid even does not show V6 addresses. But they exist and they work.

 

Some providers also offer a public V4 address for additional money. Ask for it (some even give it for free if asked for it)

 

 

On 12/25/2024 at 1:56 AM, MAM59 said:

Your provider should have offered you a public IPV6 address/prefix.

You need to switch everything to IPV6 then.

In case of Dockers it will become tricky because V6 is not really supported well yet. Unraid even does not show V6 addresses. But they exist and they work.

 

Some providers also offer a public V4 address for additional money. Ask for it (some even give it for free if asked for it)

 

 

Thanks, it looks like they offer static IPv4 for $5/mo extra so not bad. I have IPv6 turned off everywhere because it isn't very well supported. I am also using Pihole for DNS inside my network with a manually assigned local IP in Unraid so not sure how that would map over to IPv6.

7 hours ago, nickp85 said:

I have IPv6 turned off everywhere because it isn't very well supported.

You should turn it on again and slowly (but constantly) move over to it. Pihole can handle V6 addresses without problems, the "not well supported" is mostly within the brains of the people because some features work different and old "experts" had to relearn quite a lot. But it is worth the efford. Thing is that people forgot that many features like NAT have been invented to overcome problems in V4 and now are not necessary anymore. Therefor V6 usually comes without NAT, forcing people to rethink their firewall strategies and so on.

 

So the additional $5 just buy you more time, but you should start to move soon (V6 "only" exists for 25yrs now, but people are lazy and stick to the outdated stuff)

 

I was able to get ipv6 working. My router appears to be very finicky about it. Every change to WAN config requires a full reboot even though saving the change doesn’t trigger one (ASUS with Merlin firmware). Was able to get native ipv6 going and got Plex exposed using a firewall rule and a custom server URL sent to Plex in the format of https://<ipv6 ip>:32400. Remote access tab still shows it not accessible because I can’t port forward ipv4 but a port check on internet shows the IPv6 of Plex as accessible and the app is working outside home network now.

 

Now I am wondering how to get Wireguard to work?

There is no way to expose V4 ports on V6, they are different protocols, Port X on V4 is not the same as Port X on V6.

 

For what do you need Wireguard (VPN access) ?

 

1 hour ago, MAM59 said:

There is no way to expose V4 ports on V6, they are different protocols, Port X on V4 is not the same as Port X on V6.

 

For what do you need Wireguard (VPN access) ?

 

Access docker services running on my home network without exposing to the internet

Check your router, many brands include wireguard (or something alike) already. So it wont be needed on Unraid.

(but it should work somehow, I just dont know how because I never needed a VPN service for now)

 

Not had to do it myself but I think Tailscale plugin (built into Unraid 7) might be able to do this?