EXPOSE your home network to the INTERNET!! (it's safe)

NetworkChuck
3.95M subscribers
<__slot-el>
<__slot-el>
573K views 1 year ago #homelab #Cloudflare
Run your home lab like an enterprise company!! Use Red Hat Enterprise Linux for FREE: https://ntck.co/redhat  …...more
...more

1,256 Comments

Default profile photo
Add a comment...
This guy is cracked. Started as someone who literally knew nothing about networks, and here he is. Truly motivational.
1.1K
Reply
Remember to use updated software, even if the tunnel is safe, doesn't mean the software you're running is! And use good, unique passwords on your internal stuff when doing this!
413
Reply
Brother, I have been trying to learn how to expose things to the outside for a week now and have had trouble wrapping my head around how this works. I have researched so much and every tutorial lacks in giving good info that will work for anyone. You have finally given me that last piece of the puzzle and I get it now. Thank you! Keep doing you. You have helped and effected "At Least" 1 person today.
18
Reply
Thanks for the concise tutorial. Tunnels created for a couple of my home lab servers in about 4 minutes. I noticed the RHEL offer for devs before this video came out, and now have another ISO available to spin up and practice on. Thanks for the content, I am learning a lot from you and your videos.
9
Reply
I just want to say, thanks! Your videos have opened my mind to everything that is possible with a home networking that I had more or less just been ignoring because I thought the functionality was beyond my hobby's reach. In just the last few weeks I've implemented may things you've scratched the surface on so many powerful and secure ways!!
38
Reply
Thank you, Chuck. Your videos are top notch. Clear, quick and concise. It always seems you post a video on things I am currently struggling with figuring out. You're a legend.
23
Reply
I want to offer some gratitude: I've been watching your videos for years now and you're an absolute networking stud. I appreciate your videos and content so much. I've had n+ cert since 2002, but when I need to brush up on any networking I go to YouTube and type network chuck + whatever it is I'm looking to do. Today it was "network chuck vpn tunnel". Your channel single handedly adds a ton of value to YouTube. Cheers Network Chuck!
2
Reply
Was amazing meeting you Mr Chuck Thanks for all the tutorials you've taught me so much,looking forward to the future and I can't wait to pass on all I've learnt, KEEP IT UP!
Reply
I'm SO glad you did this video! I've been using CF for my domain that points to internal resources, and it was bothering me that I had to keep using port numbers in the URLs since I'm using a DDNS service. This fixed that, and I'm so stoked! I love that I keep learning something new about this industry 15 years in.
14
Reply
You are a life saver. I've been playing with Cloudflare tunnel ever since I setup uptime kuma and I tried to setup a tunnel for portainer too but I'm a total noob and didn't think to change the TLS verify setting. I literally have been trying to figure it out for days and you just solved my issue in under 10 minutes! You rock!
21
Reply
RedHat spons! You've really made it to the big time! :D This is a great thing to have in your pocket for home servers. I like the idea of everything going through cloudflare and not exposing your home IP address.
6
Reply
Chuck, you are a hero! I was very frustrated when my isp was flipping about the whole port forward thing. SO THANK YOU! I was bugged with this problem ever since they implied this new rule for port-forwarding
1
Reply
The one thing I was missing, was an additional security check before you get to the services. You can configure that in Cloudflare as well. I.e. a pin code check sent only to allowed email addresses.
55
Reply
The one thing I love about your change in video style is the SPEED!!! Your videos are awesome and no longer made for the noob like this video you need a basic understanding of docker and containers before doing this :) Also side note this is something I did along time ago using the command line and now with the docker added it’s 100x easier !!! Great video keep up the good work :)
13
Reply
Been watching your vids a few months, this is the last piece I needed for my super Lab with raspberry pi clusters, pi-hole, Iot, file sharing server. Thank You
2
Reply
Set this up via Argo tunnel about a year ago and migrated over to zero trust once it became available so I can edit my tunnels via the GUI. It’s been solid! Love it.
Reply
I love that he makes it so easy to do all of this at home. I am an ABSOLUTE noob to this but getting into the game now and thanks to this guy and a couple of others my smart home and network is getting to be on point. Plus gotta love this dudes attitude!
13
Reply
I love how you make things easy to understand.
6
Reply
Bro, we just did it and it works like a charm for our use case. We can't believe that this is exactly what we needed because our ISP sucks... We appreciated greatly, you're cracked!
Reply
Thanks for taking rhe time to make and share your videos. They are both informative and fun! I think one of the things I like best about your channel is that you show different ways to tackle problems. It's important for any IT person to have knowekdge of a variety of solutions so they can make an informed choice about which best applies to the situation at hand. Your videos add to that knowledge toolbox. Well done! Time for some coffee.
Reply
Awesome video! I love all the amazing free features that cloudflare offers. For the noobs out there it is worth noting that while the connection aspect is safe, and the threat of DDOS attacks is relatively mitigated, exposing any service to the internet is still a risk. For instance if your NAS software has a vulnerability in it that hasn't been patched, exposing it to the internet through any means could give attackers a way to exploit the vulnerability. Anything you expose to the internet from your homelab needs to stay up to date with the latest security patches! And of course the age old practice of only exposing services and hardware that absolutely needs to be exposed to achieve your goals is, in my opinion, the best way to do things.
9
Reply
Your videos are really helpful and Knowledgeable
14
Reply
Tried to do this a few months ago and got stuck. Your video really made it easy to setup and I finally have my tunnel up and running!!! Thank you!.
Reply
Chuck - you are doing an amazing job! But this guide breaks all records. This is amazing! Thank you very much. Christmas greetings from frosty Poland.
55
Reply
FYI, tunnels will not work if your power goes out or you restart your server. You'll need to create a proper docker yml to restart always. Also, since everyone has access to the domain names, you can restrict access in Cloudflare with application policies which is highly recommended.
149
Reply
This was shockingly easy to setup. Thank you for this. Saved me the hassle of going through the traefik route.
1
Reply
Thank you so much for the video. I was going to use nginx but when I came across your video it quickly changed my mind. So easy to follow. Thank you so much. Thank goodness I follow you on YouTube. First time ever doing something like this and the best part is that I did not have to do any forwarding rules on my router.
Reply
For bonus points, you can set up a "self hosted application" inside the same Zero Trust cloudflare dashboard, point it at the same public hostname you have set up with a tunnel, and instantly add a "login" screen to whatever you want. Can even set up a tunnel to expose the SSH server and get an interactive console in your browser
26
Reply
Chuck one thing would've been interesting to say was the difference between latency from exposing a load balancer locally or using a tunnel. Normally tunnels are a bit slower but I never used cloudflare for this so not sure in this case. If someone has some data would be interesting to see.
47
Reply
This is nuts!!!! you are my savior, after weeks of fighting with ISP finally I can access my server without beg them for a dynamic public IP!!! Thanks!!!!!!!! Even when my system is a Truenas I followed all the steps and installed docker as Ubuntu VM inside Truenas!!!
Reply
You forgot to mention that CF tunell allow to protect exposed subdommain - you can add 2fa login gate , block/allow connect from certain IP's etc :) there is excelent tutorial video on DB Tech channel with full tutorial on securing it :)
32
Reply
This was posted a year ago but having just seen this has been a huge game changer! for my self hosting projects!! Saved me so much time with HA Proxy and Acme Certs...and firewall rules!!! Thank you for your content!!!
Reply
This has to be the single biggest thing I have learned for my home network in 2022! This is so much easier than setting up NGINX for every server you want to expose. SIMPLE! Thank you for the early Christmas gift! Did I mention it was free?
Reply
Another option is using the Oracle Linux version - no subscription, no server registration for updates etc. Works the same for learning as RHEL without the need to manage or deal with all the crap I don't like at home. At work, it's part of life :)
3
Reply
Could you please make some videos based on this concept, but with Proxy NGINX Manager, or with Traefik with load balancing? Also a tutorial on running a Tailscale Relay and Exit Node server would be awesome. It would achieve the same concepts of this video with several advantages.
11
Reply
THIS. This video was everything. What took me about 3 hours of reading on other solutions was done pretty much in the time of the video; coffee breaks included
1
Reply
Man this saved me from a massive headache! Could not get reverse proxy going with nginx and port forwarding despite doing it a 100 times with remote desktop access and other services. Could not point to docker instances I had running and was just banging my head to a wall. Tried this out and first run it worked beautifully. Thanks for this video man! You saved me hours and opened up new possibilities !
Reply
Great video. It might also be useful to demonstrate usage of application access where you can wrap you web page behind Cloudflare's authentication engine. This way you are not directly expose you application authentication, but users first must pass the Cloudflare's authentication (for example sending access token to email).
13
Reply
I had the tunnel set up, but it only works if I access it outside my network. It would have been nice to get this to work from the local network, like in the video. Thank you for all your videos; I like the pacing of your videos with occasional coffee sips
3
Reply
Thank you so much for bringing this to my attention! Super easy and quick. Saved me so much time and money from having to set up HAProxy on an AWS or Azure instance then port forward into my home network. This is awesome!
Reply