#EOIP tunnel

128 messages · Page 1 of 1 (latest)

snow blade
#

Anyone know about mikrotik aor any router EOIP tunnel? I want to use my OVH public IP on my home server.

obtuse ferry
#

On mikrotik, EoIP tunnel may run over IPIP tunnel, PPTP tunnel or any other connection capable of transporting IP.

#

so basically anything from VPN to IPIP to GRE

#

simply have something receive at the server end receiving the tunnel

snow blade
obtuse ferry
#

port forward with openvpn then if everything else fails

#

its the simplest and crudest way

#

or wireguard

#

it will also bypass NAT and the tunnel stays alive even if your home's public IP changes

#

I don't personally have microtik experience

snow blade
obtuse ferry
#

You dont need to really care about home port forwarding

snow blade
#

EOIP allows to use ip directly on VM like IP/Subnet of and Gateway

obtuse ferry
#

if you connect to remote server

#

as a client from your home PC

#

or home server

#

even if ur ip is dynamic at home, the tunnel stays up

snow blade
#

Yea i understood that

obtuse ferry
#

and any service hosted at home server will still use remote server IP

#

as long as the tunnel stays up and you have forwarded ports over VPN

#

this add latency, but allows you to pretty much deal with dynamic IP

snow blade
#

But for example if i host Minecraft server on home server when player connects it will show public ip of player or private ip which is used by tunnel

obtuse ferry
#

its called WAN-IP tunnel

#

its also sold as service by various providers

obtuse ferry
#

if you are forwarding traffic

#

and using remote server IP on home server while the tunnel is up

#

but why would you care even if all players had same IPs in your minecraft server, and you wouldn't be able to see their home IPs but instead only the remote server IP thats tunneling the traffic?

#

you can still ban them individually based on account name

obtuse ferry
#

they wont unless you configure it incorrectly

#

but it wouldnt matter even if they did

#

it would work the same anyway

snow blade
#

Ok

#

Can you send any tutorial?

obtuse ferry
#

google "port forward home gameserver with openvpn"

#

or "port forward with VPN"

snow blade
#

Ok

#

I have to pay for vpn?

obtuse ferry
#

or "expose homelab with openvpn public ip"

obtuse ferry
#

lol

snow blade
obtuse ferry
#

yes

#

you can do all kinds of VPNs

#

that are free as long as you host them yourself

snow blade
#

Ok thanks alot for help 😊

obtuse ferry
#

OpenVPN

#

Wireguard

#

PPTP server

#

L2IP

snow blade
#

Yea I hosted PPTP

obtuse ferry
#

it doesent matter what VPN

#

what matters is you need to use iptables or something else

#

to forward specific traffic over VPN

snow blade
#

Need to forword whole traffic

#

One more question

obtuse ferry
#

yes but also the ports

#

not only traffic

snow blade
#

If i created a vpn on OVH VM

#

With 10 ips

obtuse ferry
#

it would be waste of time

#

and resources

snow blade
#

I can use 10 ips with vpn?

obtuse ferry
#

yes but why would you want to give 10 IPs

snow blade
obtuse ferry
#

to your homelab

#

its still limited by the bandwidth of that VM

snow blade
#

Not for single vm

#

Multiple vms

obtuse ferry
#

Yes, you can route multiple IPs to single OVH VPS

#

then make openvpn hand out those IPs

#

to any clients

#

and then have port forwarding rules in place

#

that all ports are forwarded to clients

snow blade
#

Hmm

obtuse ferry
#

pritunl server can do this for example

#

then you just make 10 openvpn configs

snow blade
#

I want to do tht because IPs are too costly in India

obtuse ferry
#

its the easiest way to do what you intend to do

snow blade
#

Need to install openvpn on VMS too?

obtuse ferry
#

but its also the stupidest way to do it

obtuse ferry
#

you would need to run 10 tunnels

#

1 from each VM hosted at ur home

#

to the same remote server

#

with 10 IPs

snow blade
#

Yes so need to install openvpn on all 10 VMS?

#

Or just need to install on proxmox

obtuse ferry
#

you could also have some router

#

in front of the home server

#

that has 1 tunnel only

#

to remote ovh server

#

then ur home VMs get assigned ovhcloud failover IPs

#

from that home router that handles the tunnel

snow blade
#

Ooo

obtuse ferry
#

but this is a bit harder way to do it

#

if you go this far

#

just setup GRE tunnel instead of openvpn

#

and if you do that, you might as well use mikrotik's own tunneling

snow blade
#

GRE with mikrotik?

obtuse ferry
#

but I can't really help with that stuff

#

this is something you have to figure out yourself

snow blade
#

You know any router which also has GRE?

obtuse ferry
#

but the easiest and crudest way to do what you intend to do is just using openvpn client on home server and openvpn server on ovh server

#

then make connection from home server to remote server

#

then at remote server side, forward ports and assign ips

#

this is the easiest and dumbest way to do it

#

but I cant really help beyond this

#

so have fun researching stuff

snow blade
#

I can directly assing ips to vm without assinging private ips with openvpn?

obtuse ferry
#

with GRE tunnel technically yes

#

if you talk about home VMs

snow blade
#

You know about GRE?

obtuse ferry
#

you could make GRE or IPIP tunnel and have the remote IP show up locally on ur home machine

#

as interface

#

but its kinda hacky way to do it

#

its much more normal to just forward traffic

#

and that way you dont need to care about home NAT or dynamic IPs

snow blade
#

My home router has static ip

#

Don't know why my ISP provider uses private ip for WAN

tawdry pollen
#

Hi

#

I am doing EoIP tunnel too, using mikrotik on both sides

#

but the issue is that OVH block fragmented UDP, so you can't enable network firewall, but if you don't enable then it thinks that you get DDoS attack so it goes on "Forced Mitigation" then fall the bandwidth down to 0.03 mbps download/upload