Thread
# requestsb
bumpy-carpet-66909
05/05/2023, 2:22 PMhttps://cdn.discordapp.com/attachments/933515130195562546/1104050396848205885/image.png▾
j
jolly-london-20127
05/05/2023, 2:24 PMso netmaker would not be exposed publicly, and would be behind another VPN?
b
bumpy-carpet-66909
05/05/2023, 2:25 PMit would be exposed publicly at a static IP and port(s?) assigned by mullvad, a vpn provider
j
jolly-london-20127
05/05/2023, 2:25 PMgotcha, so mullvad acting more as a proxy here?
b
bumpy-carpet-66909
05/05/2023, 2:25 PMyes!
j
jolly-london-20127
05/05/2023, 2:26 PMit should work as long as you have the correct IP and ports exposed and forwarded properly
b
bumpy-carpet-66909
05/05/2023, 2:27 PMokay cool, I just thought of something though-- would I need to expose multiple ports on the same public IP? and how many ports would I need to expose for netmaker to serve clients? (i don't need them to access the web ui through this, if that matters)
bumpy-carpet-66909
05/05/2023, 2:30 PMi'm asking because i'm using those mullvad tunnels as my load-balanced gateways for my network, and if I had to have multiple ports on the same ip i'd have to sacrifice one or pay extra
j
jolly-london-20127
05/05/2023, 2:32 PMyes, several
b
bumpy-carpet-66909
05/05/2023, 2:33 PMhow many
j
jolly-london-20127
05/05/2023, 2:34 PMjolly-london-20127
05/05/2023, 2:34 PMthere will actually be a few more than what is here. @echoing-controller-96073 is updating the docs today
jolly-london-20127
05/05/2023, 2:34 PMTURN adds a few more
jolly-london-20127
05/05/2023, 2:35 PMbut you dont have to do TURN, so could just not deploy that part
jolly-london-20127
05/05/2023, 2:35 PMAlso depends on if you want to have the netclient on the server
jolly-london-20127
05/05/2023, 2:36 PMif not, you dont have to expose 51821:51830/udp
jolly-london-20127
05/05/2023, 2:41 PMActually...I need @bored-solstice-58967 to comment. Are STUN and TURN both proxied through Caddy using 443, or do they need special ports?
jolly-london-20127
05/05/2023, 2:41 PMIf they're using 443, then you may just need that at minimum
b
bored-solstice-58967
05/05/2023, 2:49 PMTURN uses host network, and for STUN
3478b
bumpy-carpet-66909
05/05/2023, 2:54 PMso,.. just 443 and 51821?
j
jolly-london-20127
05/05/2023, 2:55 PMso you would have to leave out STUN and TURN to do that
jolly-london-20127
05/05/2023, 2:55 PMbut then yes, you can even leave out 51821
jolly-london-20127
05/05/2023, 2:55 PMthat would just be for the netclient
jolly-london-20127
05/05/2023, 2:55 PMand even then you dont have to expose the port publicly
jolly-london-20127
05/05/2023, 2:55 PMso you can get away with just 443 on a minimum install
jolly-london-20127
05/05/2023, 2:56 PMbut caddy uses 80 (certbot) to request certificates, so may have to work around that
jolly-london-20127
05/05/2023, 3:42 PM@bumpy-carpet-66909 if you're going to attempt this and are open to documenting it...join our technical writers program! We'll promote it and you'll get compensated: https://forms.gle/gs9PsyPajbMg9j1g9
3 Views