Nginx proxy manager is the easy way. Spin it up and the UI is fairly straight forward. You can also achieve the same thing with nginx or caddy, but you’ll have to set up the configs by hand.

I had issues with that recently, I had a few of my internal services set to resolve internally, but pihole was making a mess of them and returning IPv6 addresses in addition to the IPv4 internal addresses. And then browsers would try use the broken ipv6 address and fail. I just happily rely on hairpinning now, it hardly makes a difference in the scheme of things.

Devices on your domain will typically do a DNS lookup, which gets your public IP. Then they connect to that public IP, which your router recognises and redirects back into your network. The router then forwards that to your reverse proxy.

If your router isnt doing that properly (timing out usually), look up a setting usually called “NAT loopback” or “NAT hairpinning”. Thats the setting that detects your public IP, and redirects it back inward.

Did you use any of your brain though?

Fast is good because its hosted by Netflix, so isps can’t throttle Netflix without impacting fast.

The cloudflare one of new to me, thanks!

I would make sure you have a full connection in tailscale, not a relayed one. That will kill your speed.

Also check packet loss, if you are losing lots, tailscale seems to suffer badly.

Re: trickery, some ISPs have done sneaky shit like prioritising speedtest sites, while throttling everything else.

Trace route measures latency, which is not directly correlated with speed.

I have a tailscale node that is 200ms away from me, but I can still hit solid speeds to it.

Tailscale, which is wireguard is pretty lightweight protocol wise, so the overhead is usually not significant in my experience.

However, some devices don’t accelerate the crypto well, which can dramatically reduce speeds. My pi4 definitely struggles with it.

At 3mb/s, I would question if OP is getting relay’d, or possibly hitting some pretty bad packet loss.

WiFi might be the main cause of the ping issues. I would test on Ethernet to rule it out.

Is the modem causing issues? If it can handle the line speed of the internet connection I wouldn’t waste money replacing it.

I would stick to one system, orbi or eero, not both.

I’ve had three cloudkey harddisks die on me, so I’m a little jaded.

Never considered poe injectors because once get get a couple you may as well just have a switch. But if you can get them cheap then sure.

Edit: on re-reading, I think you typo’d not -> now

Unifi doesn’t need cloud, the storage is local. But unless youre already in the unifi ecosystem, their doorbells are expensive, as you also need poe switch and a cloud key (which is a poorly named local NVR).

The description of this community is not a hard rule written in stone, and I would treat it as more of a vibe than a criteria.

If you want to take it literally, then yes, Plex doesn’t count, neither does cloudflare or wordpress. And many other proprietary systems commonly used by the self hosting community.

But I think the spirit of this community is a bit more loose, and there is room for the likes of Plex.

I don’t think there are any hard and fast rules for what is self hosting. Lots of people use cloudflare, which would fail both of your criteria as well.

At least with Plex/cloudflare/others, your overall control and privacy is better and more in your control than it would be with other non-self hosted alternatives.

DNS is the way around it. But, the caveat is that while you can update your DNS entry as often as you like, itll often be cached on intermediate servers for an unknown amount of time. Expect a downtime of anywhere from a few minutes to days everytime your address changes.