Hacker News new | past | comments | ask | show | jobs | submit
yuvadam | on: DynIP – Dynamic DNS with RFC 2136, IPv6, DNSSEC, and BYOD
I used to set up my own OpenWrt DDNS scripts that update AWS Route 53 or Cloudflare DNS which solved enough of that problem for me.

Then Tailscale came out and I stopped caring about DDNS or CGNAT ever since.

dynip | parent | next
Tailscale is awesome, and Netbird is awesome, and Wireguard is awesome. It is a great time to be alive for sure. I have a guide that I wrote https://dynip.dev/guides/tailscale where I explain how and why they can exist

Agree that the OpenWrt DDNS scripts are a bit of a pain with keys secrets but the snippets function actually take the guess / how-does-it-work work out of the equation so I am pretty happy with that

networked | root | parent | next
> I have a guide that I wrote https://dynip.dev/guides/tailscale where I explain how and why they can exist

Your guide sounds obviously written by an LLM. I think that's okay, and you might have directed the LLM's work, but don't say you wrote it; this misrepresents the guide as more carefully crafted and authoritative than it really is.

silasdavis | root | parent
I would have been all over this a few months ago but I've recently been an enthusiastic convert to netbird recently. I had a look at your guide. I am using netbird reverse proxy to expose a few services and it's been pretty much flawless. It saves me from needing to set up port forwards or worry about a firewall.

Do you see an advantage or alternative benefits to also having a public dynamic DNS, because for me I am struggling to see any?

silasdavis | root | parent
Okay well I guess we are still dealing with someone else's proxy in the way (also providing TLS termination which was a big thing I was after). So you share fates with that service. It's not just a case of hole punching via a relay.

It would be nice to get something like that also with easy TLS setup.

silasdavis | root | parent
Okay you've convinced me. This is how I self host my own netbird instance and get a stable relay DNS and use the reverse proxy via that.

Procrasticus...

dynip | root | parent
So many self replies :) happy to dive in a bit more at a later time to get your take on how the services work together. hope you found the /guide helpful
smilespray | parent
I now use both. DynIP for public-facing services (yeah I still have a few), and Tailscale for what only I need to access. Drastically reduced my attack surface.

Luckily I don't have to deal with CGNAT.

dynip | root | parent
This makes me really happy, like really really. It is the exact part of the /guide where things work together and not agaist or replace, synergy and happiness.
smilespray | root | parent
Reminds me to put Tautulli on Tailscale now. Just reviewed my port openings.