You may have to set up split zone DNS so names resolve to private IPs when at home but resolve to public addresses when not home.
this post was submitted on 23 Jun 2024
51 points (98.1% liked)
Selfhosted
40444 readers
934 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
I use pihole as my home DNS to do that
This is what I do as well. I use terraform/tofu and add two entries whenever I add a new domain, one for my external provider and one for my pihole pointing at my internal IP for my home network.
I can't remember exactly what its called, but something like ~~router~~ NAT loopback is what you want. I'll have a look around. But if you set it right, things should work properly. It might be a router setting.
Found it: https://community.tp-link.com/en/home/stories/detail/1726
Thanks - I have an icotera i4850 router which claims to support NAT loopback, but I can't figure out where to do it and it seems like the manual is gone from the internet :) Might have to ask my internet provider if they have a PDF somewhere.
Edit: D'oh, it's a checkbox in the port forwarding interface! Thanks a bunch, didn't know what to look for before your reply :)
Thanks for posting this! I have the same router.
Another name, depending on the exact context, is "hairpin NAT". Should make googling with the specific router OP has easier.
I think the term often used is "NAT reflection".
Never heard that term, but its a very obscure concept, so wouldn't surprise me if it had multiple names. Probably vender specific names?
Seems quite a few people havent heard of it, hence a lot of the split DNS answers :/
On my Fritzbox, I needed to add all my Subdomains to a list under:
DNS Rebind Protection Your FRITZ!Box suppresses DNS responses that refer to IP addresses in its own home network (DNS rebind protection). Here you can specify exceptions for which DNS rebind protection should not apply. Do this by entering the complete name of the host (domain name including the subdomain) in the list.
That's under network settings, advanced. In case you have that.
Indeed it is DNS rebind protection.
I use wildcard on my Fritzbox. I added *.mydomain.com and my MyFritz address *.er467.myfritz.net
Important for everyone who makes changes on DNS rebind protection: You will need to completely RESTART your Fritzbox. Even if you add a line, or edit. One domain per line. It will not work without it ☝🏻
usually in your router settings you can change local DNS settings. you can set your domains and subdomains to point to your server's local IP.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| DNS | Domain Name Service/System |
| IP | Internet Protocol |
| NAT | Network Address Translation |
3 acronyms in this thread; the most compressed thread commented on today has 15 acronyms.
[Thread #825 for this sub, first seen 23rd Jun 2024, 06:25] [FAQ] [Full list] [Contact] [Source code]
I strongly recommend the NAT loopback route over attempting split-horizon dns.
I did go for that 😁 was a simple checkbox in the router settings.
FYI, this is called "split horizon" DNS, where the location you get directed is based on the network you adk from. Make sure you have short TTLs set on your DNS records, or devices can have problems moving between networks and still having records cached from the prior network
It depends if your reverse proxy is inside your home network or outside. It should work without any other configuration if you forward ports 80&443 from external domain with something similar to rathole and configure reverse proxy inside home network.
This is not an answer to your question about using the same url, but see this article, it might be helpful. Tl;dr: mdns + reverse proxy.
To bypass this problem you can add your domain (with all the third level ones) to your router, pointing to your internal IP
Based on my setup, I use adguard to DNS rewrite all *.example.com domains to the IP of my Nginx proxy. I have the proxys setup on NPM. On my router I have adguard set as the home network DNS. Cloudflare is used as the external DNS so that the *.example.com domains work outside of my network (and point to thr Nginx server).
My setup is relatively basic, unraid dockers etc.
If your ISP provides IPv6, set that up. Everything will have a globally routed address, so your domains will work from your LAN and the internet. If you don't have IPv6 available, get a free tunnel from Hurricane Electric.
Ipv6
Depending on your gateway, you may be able to override the DNS settings for a few domains that you use internally