Just getting started with self hosting. I was wondering if anyone had experience with Cloudflare Tunnels for exposing their services to the internet. I like the simplicity and security it offers but don’t love the idea of using Cloudflare. Like, I’m self hosting for a reason lol. Any tips would be greatly appreciated!

For context, I’m running all of my services in a very small k8s cluster and my priorities are mostly security then maintainability. Thanks yall!

EDIT: yall are great! Thank you so much for the replies. I’m going try my luck with pangolin but its good to know I have options.

  • talentedkiwi@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    11
    ·
    6 days ago

    I’m using Pangolin, which is the current hotness. It’s somewhat like cloud flare tunnels, but you need a VPS (find a cheap one). That tunnels back to your house. I opted into using crowdsec as another later. It’s a part of their setup process.

    • aaravchen@lemmy.zip
      link
      fedilink
      English
      arrow-up
      2
      ·
      5 days ago

      So what benefit does Pangolin actually provide then if you already have to provide the VPS? Routing back to your network from a VPS is trivially easy, it’s getting the affordable VPS (given bandwidth prices) that’s actually the sticking point of any solution.

      • talentedkiwi@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        4
        ·
        5 days ago

        Over cloudflare, it’s knowing you’re the man in the middle and not some company. It has a few other things like zero trust, and an authentication layer.

        I use racknerd for VPS and it’s about $35/year. So definitely one of the cheapest part of my home lab.

        • aaravchen@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          ·
          9 hours ago

          The Racknerd $35/yr seems to be the 500MB RAM VPS with a 500GB/mo network data limit. That’s probably sufficient power for a wireguard endpoint for ingress, but that’s pretty low network data limit if you’re putting a media server behind it (10GB/hr of video isn’t unexpected, data is counted twice when having to ingress+egress thru the endpoint=25 hours of quality video per month)

        • aaravchen@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          ·
          9 hours ago

          Vs Cloudflare I agree. Giving up the MitM isn’t an acceptable trade off in my opinion either.