Hacker News Reader

Comment by TomK32 | Hacker News Reader

It's fun to host at home, I run docker on alpine VMs on two proxmox machines. Yeah, different docker machines for each user or use-case look complicated but it works fine and I can mount nfs or samba mounts as needed. Only thing I have on the cloud is a small hetzner server which I mostly use as a nginx proxy and iptables is great for that minecraft VM.

Why did you go for Cloudfare tunnel instead of wireguard?

View on HN

Cloudflare Tunnel provides you a publicly routable address for free. With wireguard you would still need a VM somewhere, and if you are hosting your own VM, then whats the point?

But you are using someone else’s VM. You just don’t pay for it.

Not making Cloudflare more of a central point of failure for the internet? We hosted web pages before they MITM'd the entire web.

I like how they have amazing great free services and people are upset so many people use it.

That's what we all said about various Google products many years ago, too.

Then you just switch to something else. What’s the problem? You’re not locked in.

> We hosted web pages before they MITM'd the entire web.

We also hosted web pages before the average script kiddie could run tens of Gbps DDoS on sites for the lolz. And before ISPs used CGNAT making direct inbound connections impossible.

Public IPv4 address exhausted and NAT happened.

Even having IPv6 is not a proper solution because of laggy ISPs(currently reaching ~50%) and the even the ISPs who deploy, do not deploy it properly. (dynamic prefixes or inbound blocked IPv6)

Add to the mix that lot of people does not understand IPv6, internet became more centralized and will keep doing so for the foreseeable future.

It's a small cost of $4.50/month and allows me a lot more control. In regards to wireguard, that one VM I pay for is the central wireguard node for all sorts of devices that I use, allowing me to securely access home services when I'm not at home. There are services you don't want to expose directly via a Cloudfare Tunnel.

Reply on news.ycombinator.com