This is exactly what happened to me, but was able to contact my ISP to drop IPv6 support and get back my ports forwarding to work on my line

Neat bot!

Yo this bot is super helpful

Oh I love this idea for a bot! Well done!

Good bot

I’m actually not sure you can easily get tailscale up and running om such as a setup as it uses the same cgnat ip range.

While I use ssh tunneling to access systems on a temporary basis, usually http, some caveats:

• I don't know of a daemon to set up locally that will re-establish tunnels on power loss and the like. Not technically-difficult, but something one probably wants if this is going to be how he's gonna get at the system long-term rather than "I just need one-off access".

• One other downside -- the service that the user here is aiming to expose is apparently ssh. For me -- reaching an http server -- wrapping the connection for remote use is desirable. For him, it probably isn't, as there'll be two layers of encryption. Not the end of the world, but it's a hit. You do want encryption in the outer protocol at least insofar as you need it to protect authentication to the VPS anyway.

This. I had the same situation being put behind CGnat and told them my security webcam needs port forwarding from outside and they had me back to a public IP within minutes.

Unfortunately IPv6 adoption is not universal. There will be parts of the internet that won't be able to reach you at a 6-only address.

I second this. I use a couple of dirt cheap VPSs from racknerd ($24/yr for 1 CPU/512Mb ram, but you can find coupons online to get them for $10/yr 1CPU/768mb ram) one does port forwarding over wireguard to my mail server so I can keep all my data in house, the other hosts an NGINX reverse proxy for all my web services. Works great. I use the reverse proxy for nextcloud and jellyfin for myself and 6 other users. Never had an issue. (Well, never had an issue I didn't cause myself at any rate.)

It's a little harder to set up than some of the other suggestions, but it's cheap, fully transparent to users, and doesn't expose your home network to the outside world.

Personally I would strongly recommend learning how to do all of this. And then abandoning it for tailscale or something similar once you know what they're doing behind the scenes. It's incredibly useful knowledge but it's also nice to have so much of the process automated and best practices like key rotation done for you. Plus unless your network is hugely crazy or enterprise, you can manage for the really great price of $0.

And if you really really want to self host (which I understand) there's headscale for a lot of the features.

Oracle is awesome in this one specific way. They suck in all other ways but this is really good.

You say that as if most don’t hold a monopoly in their available regions. At least in America, you typically have the choice of one, maybe more if you’re in a largeish city, and I suppose you have the option of a 5G hub but that’s terrible for running services.