Suggestion to add remote.it support

[lzkill]

Recently I've changed to a small ISP, great guys and good service. But unfortunately they do cgnat on the link, so I can't access my devices from outside their network. The solution I found is having a raspberry pi inside my LAN with remote.it. This way I can open tunnels to my lan devices with no hassle.

It would be awesome to have a script to install and run the deamon needed to make this work, so I wouldn't need the rpi anymore. What do you guys think?

Thanks!

 

[agilani]

Recently I've changed to a small ISP, great guys and good service. But unfortunately they do cgnat on the link, so I can't access my devices from outside their network. The solution I found is having a raspberry pi inside my LAN with remote.it. This way I can open tunnels to my lan devices with no hassle.

It would be awesome to have a script to install and run the deamon needed to make this work, so I wouldn't need the rpi anymore. What do you guys think?

Thanks!

I googled this for you

Quick & Easy: Tinc VPN on ASUSWRT-Merlin

Easy setup Tinc VPN 1.1 on ASUSWRT-Merlin with windows client (repeat client step to add more clients)

nwgat.ninja

 

[heysoundude]

Tinc could work, but this is what the cool kids are playing with now (note: only available for certain models) -

[Experimental] WireGuard for HND platform (4.1.x kernels)

1. Install WireGuard You need Entware-aarch64-3.10 to use wireguard without a new firmware build. ㅡ Kernel Module ㅡ RT-AC86U, GT-AC2900 - 4.1.27 https://github.com/odkrys/entware-makefile-for-merlin/raw/main/wireguard-kernel_1.0.20210219-k27_1_aarch64-3.10.ipk opkg install...

www.snbforums.com

enable IPv6 on your network (if CGNAT is in place from your ISP, I don't see why you wouldn't have an IPv6 connection) and do away with NAT for the most part...but that means your DNS has to be up to the job. Fortunately for people running Merlin, there's unbound:

Unbound - unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

This thread is for the discussion topic : unbound_manager script. As per the GitHub Hints/Tips: Differences between the operational modes Easy mode Advanced Mode 'Easy' mode - you have limited Install options: i.e. Advanced Options Stubby Integration DoT installs are not available...

www.snbforums.com

Good luck, Happy surfing!

 

[agilani]

Tinc could work, but this is what the cool kids are playing with now (note: only available for certain models) -

[Experimental] WireGuard for HND platform (4.1.x kernels)

1. Install WireGuard You need Entware-aarch64-3.10 to use wireguard without a new firmware build. ㅡ Kernel Module ㅡ RT-AC86U, GT-AC2900 - 4.1.27 https://github.com/odkrys/entware-makefile-for-merlin/raw/main/wireguard-kernel_1.0.20210219-k27_1_aarch64-3.10.ipk opkg install...

www.snbforums.com

enable IPv6 on your network (if CGNAT is in place from your ISP, I don't see why you wouldn't have an IPv6 connection) and do away with NAT for the most part...but that means your DNS has to be up to the job. Fortunately for people running Merlin, there's unbound:

Unbound - unbound_manager (Manager/Installer utility for unbound - Recursive DNS Server)

This thread is for the discussion topic : unbound_manager script. As per the GitHub Hints/Tips: Differences between the operational modes Easy mode Advanced Mode 'Easy' mode - you have limited Install options: i.e. Advanced Options Stubby Integration DoT installs are not available...

www.snbforums.com

Good luck, Happy surfing!

Does asus dyndns work with ipv6? I haven't really looked into that as an option. May have to try it.

 

[heysoundude]

unbound replaces dyndns, and works perfectly well with IPv6.
see mine below, with 0-1 usec (microsecond) DNS lookups...yes, a good portion of the data is centred around 65-135 msec (that's non-cached DNS data that requires going to the authoritative servers Google/CloudFlare reference), but the majority of things happen MUCH faster than that.
You SHOULD try it.