Set up a web server behind a Carrier Grade NAT
I was trying to set up a small home server.
I use dynamic IP adress. My router's wan adress is like this 100.70.81.xxx and my public ip is 81.213.177.xx
I made port forwarding in my router. www, smtp and pop3 ports are open. But still my server is not accessible from public internet I think.
So should my computer be behind a Carrier Grade NAT. If this is the case is it still possible to set up a web server behind a CGN?
networking port-forwarding nat
asked Oct 11 '17 at 5:32
ErdemErdem
12113
add a comment |
I was trying to set up a small home server.
I use dynamic IP adress. My router's wan adress is like this 100.70.81.xxx and my public ip is 81.213.177.xx
I made port forwarding in my router. www, smtp and pop3 ports are open. But still my server is not accessible from public internet I think.
So should my computer be behind a Carrier Grade NAT. If this is the case is it still possible to set up a web server behind a CGN?
networking port-forwarding nat
asked Oct 11 '17 at 5:32
ErdemErdem
12113
Please read Alternatives to Port Forwarding & NAT: "There are four major problems that you may run into that would require alternatives to port forwarding. " ...
– DavidPostill♦
Oct 11 '17 at 19:13
add a comment |
I was trying to set up a small home server.
I use dynamic IP adress. My router's wan adress is like this 100.70.81.xxx and my public ip is 81.213.177.xx
I made port forwarding in my router. www, smtp and pop3 ports are open. But still my server is not accessible from public internet I think.
So should my computer be behind a Carrier Grade NAT. If this is the case is it still possible to set up a web server behind a CGN?
networking port-forwarding nat
asked Oct 11 '17 at 5:32
ErdemErdem
12113
I was trying to set up a small home server.
I use dynamic IP adress. My router's wan adress is like this 100.70.81.xxx and my public ip is 81.213.177.xx
I made port forwarding in my router. www, smtp and pop3 ports are open. But still my server is not accessible from public internet I think.
So should my computer be behind a Carrier Grade NAT. If this is the case is it still possible to set up a web server behind a CGN?
networking port-forwarding nat
networking port-forwarding nat
asked Oct 11 '17 at 5:32
ErdemErdem
12113
asked Oct 11 '17 at 5:32
ErdemErdem
12113
asked Oct 11 '17 at 5:32
ErdemErdem
12113
asked Oct 11 '17 at 5:32
ErdemErdem
12113
asked Oct 11 '17 at 5:32
ErdemErdem
12113
12113
Please read Alternatives to Port Forwarding & NAT: "There are four major problems that you may run into that would require alternatives to port forwarding. " ...
– DavidPostill♦
Oct 11 '17 at 19:13
add a comment |
Please read Alternatives to Port Forwarding & NAT: "There are four major problems that you may run into that would require alternatives to port forwarding. " ...
– DavidPostill♦
Oct 11 '17 at 19:13
Please read Alternatives to Port Forwarding & NAT: "There are four major problems that you may run into that would require alternatives to port forwarding. " ...
– DavidPostill♦
Oct 11 '17 at 19:13
Please read Alternatives to Port Forwarding & NAT: "There are four major problems that you may run into that would require alternatives to port forwarding. " ...
– DavidPostill♦
Oct 11 '17 at 19:13
add a comment |
3 Answers
3
active
oldest
votes
Your router's "WAN" address is from the private 100.64.0.0/10 range (which is kinda like 192.168.x, but dedicated specifically to CGNAT). So that means you're behind CGN and the global address you're seeing is shared between multiple customers.
So the only ways to set up a server behind a NAT you don't control are:
Make the ISP do port-forwarding...yeah, that's not gonna happen. (Even though in theory NAT-PMP was supposed to permit that.)Obtain your own global address from somewhere else, for example there are VPN providers which support server hosting and can give you a static address.
If you have IPv6, that would be globally reachable, though you'd additionally need a service which can proxy connections from IPv4-speaking clients to your IPv6-only server (e.g. CloudFlare might do the job).
(IPFS also comes to mind as option 3¾ – recently I've seen a few static-page websites hosted via "web-to-IPFS" proxy servers. From the outside it looks like a completely normal domain which is aliased to gateway.ipfs.io.)
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
do you have an example of a VPN provider with that functionality?
– Juan Leni
Apr 8 '18 at 15:27
add a comment |
ngrok working fine for me. I was about to bang my head but you saved me.
my router is behind CGNAT. I signed up in ngrok with free account and believe me its free forever.
just need to download ngrok for Linux
go to installed dir, Unzip it and run ./ngrok tcp 22 --> i want to access my linux machine from internet over ssh you may like to open port 80 or whatever application you want to access on internet.
once run completed it will give you dynamic link with port, you are done
Enjoy !!
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
add a comment |
I had the same issue, I wanted to create a small home based web server and my computer was behind a Carrier Grade NAT so it was not possible to do port forwarding on my router and access my app outside my home network.
The solution I found is called ngrok. No need to do port forward anymore, it will create a secure tunnel to localhost and you'll be able to connect your web application from anywhere.
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1258093%2fset-up-a-web-server-behind-a-carrier-grade-nat%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
Your router's "WAN" address is from the private 100.64.0.0/10 range (which is kinda like 192.168.x, but dedicated specifically to CGNAT). So that means you're behind CGN and the global address you're seeing is shared between multiple customers.
So the only ways to set up a server behind a NAT you don't control are:
Make the ISP do port-forwarding...yeah, that's not gonna happen. (Even though in theory NAT-PMP was supposed to permit that.)Obtain your own global address from somewhere else, for example there are VPN providers which support server hosting and can give you a static address.
If you have IPv6, that would be globally reachable, though you'd additionally need a service which can proxy connections from IPv4-speaking clients to your IPv6-only server (e.g. CloudFlare might do the job).
(IPFS also comes to mind as option 3¾ – recently I've seen a few static-page websites hosted via "web-to-IPFS" proxy servers. From the outside it looks like a completely normal domain which is aliased to gateway.ipfs.io.)
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
do you have an example of a VPN provider with that functionality?
– Juan Leni
Apr 8 '18 at 15:27
add a comment |
Your router's "WAN" address is from the private 100.64.0.0/10 range (which is kinda like 192.168.x, but dedicated specifically to CGNAT). So that means you're behind CGN and the global address you're seeing is shared between multiple customers.
So the only ways to set up a server behind a NAT you don't control are:
Make the ISP do port-forwarding...yeah, that's not gonna happen. (Even though in theory NAT-PMP was supposed to permit that.)Obtain your own global address from somewhere else, for example there are VPN providers which support server hosting and can give you a static address.
If you have IPv6, that would be globally reachable, though you'd additionally need a service which can proxy connections from IPv4-speaking clients to your IPv6-only server (e.g. CloudFlare might do the job).
(IPFS also comes to mind as option 3¾ – recently I've seen a few static-page websites hosted via "web-to-IPFS" proxy servers. From the outside it looks like a completely normal domain which is aliased to gateway.ipfs.io.)
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
do you have an example of a VPN provider with that functionality?
– Juan Leni
Apr 8 '18 at 15:27
add a comment |
Your router's "WAN" address is from the private 100.64.0.0/10 range (which is kinda like 192.168.x, but dedicated specifically to CGNAT). So that means you're behind CGN and the global address you're seeing is shared between multiple customers.
So the only ways to set up a server behind a NAT you don't control are:
Make the ISP do port-forwarding...yeah, that's not gonna happen. (Even though in theory NAT-PMP was supposed to permit that.)Obtain your own global address from somewhere else, for example there are VPN providers which support server hosting and can give you a static address.
If you have IPv6, that would be globally reachable, though you'd additionally need a service which can proxy connections from IPv4-speaking clients to your IPv6-only server (e.g. CloudFlare might do the job).
(IPFS also comes to mind as option 3¾ – recently I've seen a few static-page websites hosted via "web-to-IPFS" proxy servers. From the outside it looks like a completely normal domain which is aliased to gateway.ipfs.io.)
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
Your router's "WAN" address is from the private 100.64.0.0/10 range (which is kinda like 192.168.x, but dedicated specifically to CGNAT). So that means you're behind CGN and the global address you're seeing is shared between multiple customers.
So the only ways to set up a server behind a NAT you don't control are:
Make the ISP do port-forwarding...yeah, that's not gonna happen. (Even though in theory NAT-PMP was supposed to permit that.)Obtain your own global address from somewhere else, for example there are VPN providers which support server hosting and can give you a static address.
If you have IPv6, that would be globally reachable, though you'd additionally need a service which can proxy connections from IPv4-speaking clients to your IPv6-only server (e.g. CloudFlare might do the job).
(IPFS also comes to mind as option 3¾ – recently I've seen a few static-page websites hosted via "web-to-IPFS" proxy servers. From the outside it looks like a completely normal domain which is aliased to gateway.ipfs.io.)
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
edited Oct 11 '17 at 6:21
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
answered Oct 11 '17 at 6:14
grawitygrawity
234k36495550
234k36495550
do you have an example of a VPN provider with that functionality?
– Juan Leni
Apr 8 '18 at 15:27
add a comment |
do you have an example of a VPN provider with that functionality?
– Juan Leni
Apr 8 '18 at 15:27
do you have an example of a VPN provider with that functionality?
– Juan Leni
Apr 8 '18 at 15:27
do you have an example of a VPN provider with that functionality?
– Juan Leni
Apr 8 '18 at 15:27
add a comment |
ngrok working fine for me. I was about to bang my head but you saved me.
my router is behind CGNAT. I signed up in ngrok with free account and believe me its free forever.
just need to download ngrok for Linux
go to installed dir, Unzip it and run ./ngrok tcp 22 --> i want to access my linux machine from internet over ssh you may like to open port 80 or whatever application you want to access on internet.
once run completed it will give you dynamic link with port, you are done
Enjoy !!
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
add a comment |
ngrok working fine for me. I was about to bang my head but you saved me.
my router is behind CGNAT. I signed up in ngrok with free account and believe me its free forever.
just need to download ngrok for Linux
go to installed dir, Unzip it and run ./ngrok tcp 22 --> i want to access my linux machine from internet over ssh you may like to open port 80 or whatever application you want to access on internet.
once run completed it will give you dynamic link with port, you are done
Enjoy !!
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
add a comment |
ngrok working fine for me. I was about to bang my head but you saved me.
my router is behind CGNAT. I signed up in ngrok with free account and believe me its free forever.
just need to download ngrok for Linux
go to installed dir, Unzip it and run ./ngrok tcp 22 --> i want to access my linux machine from internet over ssh you may like to open port 80 or whatever application you want to access on internet.
once run completed it will give you dynamic link with port, you are done
Enjoy !!
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
ngrok working fine for me. I was about to bang my head but you saved me.
my router is behind CGNAT. I signed up in ngrok with free account and believe me its free forever.
just need to download ngrok for Linux
go to installed dir, Unzip it and run ./ngrok tcp 22 --> i want to access my linux machine from internet over ssh you may like to open port 80 or whatever application you want to access on internet.
once run completed it will give you dynamic link with port, you are done
Enjoy !!
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
answered Sep 23 '18 at 11:35
urveshj mendheurveshj mendhe
412
412
add a comment |
add a comment |
I had the same issue, I wanted to create a small home based web server and my computer was behind a Carrier Grade NAT so it was not possible to do port forwarding on my router and access my app outside my home network.
The solution I found is called ngrok. No need to do port forward anymore, it will create a secure tunnel to localhost and you'll be able to connect your web application from anywhere.
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
add a comment |
I had the same issue, I wanted to create a small home based web server and my computer was behind a Carrier Grade NAT so it was not possible to do port forwarding on my router and access my app outside my home network.
The solution I found is called ngrok. No need to do port forward anymore, it will create a secure tunnel to localhost and you'll be able to connect your web application from anywhere.
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
add a comment |
I had the same issue, I wanted to create a small home based web server and my computer was behind a Carrier Grade NAT so it was not possible to do port forwarding on my router and access my app outside my home network.
The solution I found is called ngrok. No need to do port forward anymore, it will create a secure tunnel to localhost and you'll be able to connect your web application from anywhere.
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
I had the same issue, I wanted to create a small home based web server and my computer was behind a Carrier Grade NAT so it was not possible to do port forwarding on my router and access my app outside my home network.
The solution I found is called ngrok. No need to do port forward anymore, it will create a secure tunnel to localhost and you'll be able to connect your web application from anywhere.
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
answered Nov 13 '17 at 20:49
smallwat3rsmallwat3r
1112
1112
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1258093%2fset-up-a-web-server-behind-a-carrier-grade-nat%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Please read Alternatives to Port Forwarding & NAT: "There are four major problems that you may run into that would require alternatives to port forwarding. " ...
– DavidPostill♦
Oct 11 '17 at 19:13