#EOIP tunnel
128 messages · Page 1 of 1 (latest)
On mikrotik, EoIP tunnel may run over IPIP tunnel, PPTP tunnel or any other connection capable of transporting IP.
so basically anything from VPN to IPIP to GRE
simply have something receive at the server end receiving the tunnel
but my home server dosent have public network so what will be local ip
port forward with openvpn then if everything else fails
its the simplest and crudest way
or wireguard
it will also bypass NAT and the tunnel stays alive even if your home's public IP changes
I don't personally have microtik experience
Ok but I have to assign private ip to home vm then forward?
You dont need to really care about home port forwarding
EOIP allows to use ip directly on VM like IP/Subnet of and Gateway
if you connect to remote server
as a client from your home PC
or home server
even if ur ip is dynamic at home, the tunnel stays up
Yea i understood that
and any service hosted at home server will still use remote server IP
as long as the tunnel stays up and you have forwarded ports over VPN
this add latency, but allows you to pretty much deal with dynamic IP
But for example if i host Minecraft server on home server when player connects it will show public ip of player or private ip which is used by tunnel
??
it will obviously show the IP of the player
if you are forwarding traffic
and using remote server IP on home server while the tunnel is up
but why would you care even if all players had same IPs in your minecraft server, and you wouldn't be able to see their home IPs but instead only the remote server IP thats tunneling the traffic?
you can still ban them individually based on account name
They all will have same ip?
they wont unless you configure it incorrectly
but it wouldnt matter even if they did
it would work the same anyway
or "expose homelab with openvpn public ip"
you can just install the free openvpn server on the server with public IP
lol
Yea that software is free right?
Ok thanks alot for help 😊
Yea I hosted PPTP
it doesent matter what VPN
what matters is you need to use iptables or something else
to forward specific traffic over VPN
I can use 10 ips with vpn?
yes but why would you want to give 10 IPs
Ugh how
Yes, you can route multiple IPs to single OVH VPS
then make openvpn hand out those IPs
to any clients
and then have port forwarding rules in place
that all ports are forwarded to clients
Hmm
I want to do tht because IPs are too costly in India
and use one for each VM in ur home server
its the easiest way to do what you intend to do
Need to install openvpn on VMS too?
but its also the stupidest way to do it
the client only
you would need to run 10 tunnels
1 from each VM hosted at ur home
to the same remote server
with 10 IPs
you could also have some router
in front of the home server
that has 1 tunnel only
to remote ovh server
then ur home VMs get assigned ovhcloud failover IPs
from that home router that handles the tunnel
Ooo
but this is a bit harder way to do it
if you go this far
just setup GRE tunnel instead of openvpn
and if you do that, you might as well use mikrotik's own tunneling
GRE with mikrotik?
but I can't really help with that stuff
this is something you have to figure out yourself
You know any router which also has GRE?
but the easiest and crudest way to do what you intend to do is just using openvpn client on home server and openvpn server on ovh server
then make connection from home server to remote server
then at remote server side, forward ports and assign ips
this is the easiest and dumbest way to do it
but I cant really help beyond this
so have fun researching stuff
I can directly assing ips to vm without assinging private ips with openvpn?
You know about GRE?
here
you could make GRE or IPIP tunnel and have the remote IP show up locally on ur home machine
as interface
but its kinda hacky way to do it
its much more normal to just forward traffic
and that way you dont need to care about home NAT or dynamic IPs
Hi
I am doing EoIP tunnel too, using mikrotik on both sides
but the issue is that OVH block fragmented UDP, so you can't enable network firewall, but if you don't enable then it thinks that you get DDoS attack so it goes on "Forced Mitigation" then fall the bandwidth down to 0.03 mbps download/upload