Hi all,
Firstly, I wanted to thank everyone at Lawrence Systems for great content! It has helped me in so many ways. I’m sure this topic has been exhausted on here, but bear with me please!
Hardware:
-pfSense Router
-Unifi 16-port POE switch
-Truenas Server with Cloudflared connected
-Several VPN solutions (Nord, OpenVPN, Wireguard)
I have a smaller home lab and I am not a networking professional, but I have definitely learned a lot over the past few months! I have been exploring my options of forwarding ports to run a Timpi node via linux/docker. I believe I can port forward via pfsense and open the ports needed to run the node without bypassing ISP/CGNAT, but I would like to expose my network in the most secure way. Please keep in mind, the machine DOES already have it’s own dedicated VLAN. I have successfully deployed openvpn as well, but the connection speeds are sub-par.
I was floating the idea of using a cloudflare tunnel to achieve the privacy, security and functionality for this, but all I have read or seen on the tunnels discusses exposing self-hosted services. Does anyone have suggestions on the best way to bypass CGNAT and open the necessary ports ? I apologize in advance for being such a noob, and thank you in advance for any help!