Reverse proxy over VPN

Hey. I’d like to ask if i could use (and ideally describe how) Traefik as my reverse proxy on my cloud (AWS) VPS facing outer world together with some kind of VPN like Wireguard (ideally) pointing to my local network server (which would be connected to the VPN as client sending services data)?

  • I don’t have control over port forwarding with my ISP
  • I have IPv6 and it’s implementation is done terribly meaning i can’t even ping my ipv6 address from other ipv6 client
    (just to clear things out even before someone start to suggest going other way than this)

Use a cloudflared tunnel. You can set it up in docker. No ports to forward. Here is a video explaining it and showing how to use the tunnel with docker compose.

https://docs.ibracorp.io/cloudflare-tunnel

I also wanted to use traefik as my reverse proxy and I’m also behind cgnat. I couldn’t ever figure out how to set it up with a vps and connect my multiple vm’s all together using traefik. I ended up using nginx proxy manager with Tailscale between my server and vps to access my stuff on the net. Would have liked to use traefik but it was a little over my head at the time.

I already have cloudflare tunnel set up. It’s disconnecting randomly and is really slow for data transfer.

Thank you. How did youn configure nginx to do such thing? In case of complicated setup, i would use nginx instead of traefik but i would like to use wireguard to ditch from any 3rd party implementation.

Im surprised that its not working well for you, its been clutch for me. I’ve never noticed any slowdowns on any of the services I self-host, though none are moving all that much data. Maybe try and recreate the cloudflare tunnel? What is your use case? As in what sort of server are you connecting to at home? A web server? File Server? How much bandwidth do you need for this service?

Well in my setup I’m using cloud flare for my dns. I’m pointing my vps public ip to my domain name on cloudflare.

I have Tailscale setup on the VPs and then a lxc in proxmox. The lxc is setup as a subnet gateway in Tailscale and I’m just exposing the internal ip’s of the services I want access to.

Then back on the vps I have npm running in docker, you just simply use the internal ip’s and ports that your services are running on in your lab and it works.

It is essentially the same thing as a cloudflare tunnel