EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·21d ago·5 min read
Self-Hosting Behind CGNAT
TL;DR
Self-hosting at home has become more complex due to carrier-grade NAT (CGNAT), which complicates direct access to local servers. A solution involves using a VPS bridge and a WireGuard tunnel to securely connect home services to the internet without needing a static IP.
✦ Why It Matters
Consider setting up a WireGuard tunnel to maintain control over your self-hosted services today.
Key Takeaways
- Explore self-hosting to avoid reliance on cloud services.
- Use a VPS bridge to connect your home server to the internet.
- Implement a WireGuard tunnel for secure communication.
- Evaluate the cost of a static IP versus using a VPN.
Full Summary
Self-hosting allows individuals to control their software and hardware without relying on cloud services. Traditionally, users could easily set up servers by forwarding ports on their routers.
However, the rise of carrier-grade NAT (CGNAT) has made this difficult, as multiple users share the same public IP address, preventing direct access. To overcome this, a mid-range home server can connect to a cheap VPS in a different location using a bidirectional WireGuard tunnel, a secure VPN technology.
This setup allows for seamless communication between the home server and the internet, initiated from the home side, eliminating the need for a static IP. The only trade-off is a slight increase in latency, with a round-trip time of 39 milliseconds.