[kwlug-disc] Remote access to machine behind CG-NAT

[Jason]

Pihole + Unbound

I use Pihole local DNS entries to map static services in my homelab to a
.local domain.   If that's all you need it should suffice.

You can set upstream DNS to a public server, or chain your own to cache and
make DNS requests yourself using Unbound quite easily.  Both can be run as
Docker containers.

Jason

On Wed, Jun 25, 2025, 3:36 PM Khalid Baheyeldin <kb at 2bits.com> wrote:

> I ended up using Wireguard for a VPN.
>
> It works really well, even on a lowly 1 vCPU VPS acting as the gateway.
>
> The issue was that the vast majority of tutorials are about hiding
> your IP address for privacy, or to access US based services.
> In my case, I just want to connect a handful of machines together
> without setting up NAT or port forwarding or any of these gymnastics.
>
> Wireguard is a peer protocol, and all the nodes can access each other
> seamlessly.
>
> One task remaining is setting up a small DNS server instead of dealing
> with raw 10.0.0.3 being the home server, and 10.0.0.2 being my laptop.
> Adding the machines to /etc/hosts is tedious because it has to be done
> on each machine, and this will not work for Android devices.
>
> I feel like using the BIND server is overkill for this.
>
> Any suggestions of a small easy to manage DNS server?
> _______________________________________________
> kwlug-disc mailing list
> To unsubscribe, send an email to kwlug-disc-leave at kwlug.org
> with the subject "unsubscribe", or email
> kwlug-disc-owner at kwlug.org to contact a human being.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20250625/7a7e3ca1/attachment.htm>