Subject: CGNAT Setup – VP...
Subject: CGNAT Setup – VPN Tunnel with Static IP for Self-Hosted Services on OpenWrt
- Home
- Control Panel
- Community Forum
- Services
- Dynamic DNS Service
- Subject: CGNAT Setup – VPN Tunnel with Static IP for Self-Hosted Services on OpenWrt
- Community Forum
- Subject: CGNAT Setup – VPN Tunnel with Static IP for Self-Hosted Services on OpenWrt
Topic: Subject: CGNAT Setup – VPN Tunnel with Static IP for Self-Hosted Services on OpenWrt
by bikemacguyver on Monday, July 20, 2026
Hello,
I have a domain registered with Dynu and currently use an ISP connection behind CGNAT (Carrier-Grade NAT), which prevents inbound connections to my self-hosted web services.
I need to set up a VPN tunnel through Dynu that will:
Provide me with a static IP address for DNS resolution
Allow inbound traffic to reach my self-hosted services
Work with OpenWrt router (I can configure custom routing)
My questions:
Does Dynu offer a VPN tunnel service with static IP, and if so, what is the monthly cost?
If available, what are the connection details (VPN server address, port, protocol, authentication method)?
Do you have setup documentation for OpenWrt, or can you provide the technical specifications I need to configure it manually?
Will this service support my traffic profile (~1GB per month, up to 500 client connections)?
I'm prepared to handle custom OpenWrt configuration on my end if needed.
Thank you for your assistance.
Best regards,
Miro
I have a domain registered with Dynu and currently use an ISP connection behind CGNAT (Carrier-Grade NAT), which prevents inbound connections to my self-hosted web services.
I need to set up a VPN tunnel through Dynu that will:
Provide me with a static IP address for DNS resolution
Allow inbound traffic to reach my self-hosted services
Work with OpenWrt router (I can configure custom routing)
My questions:
Does Dynu offer a VPN tunnel service with static IP, and if so, what is the monthly cost?
If available, what are the connection details (VPN server address, port, protocol, authentication method)?
Do you have setup documentation for OpenWrt, or can you provide the technical specifications I need to configure it manually?
Will this service support my traffic profile (~1GB per month, up to 500 client connections)?
I'm prepared to handle custom OpenWrt configuration on my end if needed.
Thank you for your assistance.
Best regards,
Miro
Reply with quote |Report
by v66v on Wednesday, July 22, 2026
Hi Miro,
You could purchase a cheap but not slow VPS which has a static IP address, set up a VPN tunnel with your OpenWrt router, and then redirect/map your VPS ports to your self-hosted web services ports.
Good Luck :)
You could purchase a cheap but not slow VPS which has a static IP address, set up a VPN tunnel with your OpenWrt router, and then redirect/map your VPS ports to your self-hosted web services ports.
Good Luck :)
Reply with quote |Report
by bikemacguyver on Friday, July 24, 2026
Hi v66v,
I understand—if Dynu doesn't support tunnelling, I can setup VPN from VPS on my own. However, I'm wondering if using a VPS would be overkill, especially since if I'd need to pay extra to collect A and MX records and forward them to my private NAT behind the ISP's CGNAT. I haven't tackled this type of work since the early 2010s.
Alternatively, would it make more sense to host everything on a VPS instead, provided nginx and database is light?
Thanks
I understand—if Dynu doesn't support tunnelling, I can setup VPN from VPS on my own. However, I'm wondering if using a VPS would be overkill, especially since if I'd need to pay extra to collect A and MX records and forward them to my private NAT behind the ISP's CGNAT. I haven't tackled this type of work since the early 2010s.
Alternatively, would it make more sense to host everything on a VPS instead, provided nginx and database is light?
Thanks
Reply with quote |Report
by v66v on Saturday, July 25, 2026
Hi Miro,
It would be much more convenient to host everything on a VPS. However, there are two things to consider: whether you can tolerate occasional VPS downtime, and whether the cost fits your budget.
I just had another idea: does your ISP assign you an IPv6 prefix? If both your server and your clients have native IPv6 connectivity, then you can bypass CGNAT entirely, which would solve most of the problem.
Let me know what you think!
It would be much more convenient to host everything on a VPS. However, there are two things to consider: whether you can tolerate occasional VPS downtime, and whether the cost fits your budget.
I just had another idea: does your ISP assign you an IPv6 prefix? If both your server and your clients have native IPv6 connectivity, then you can bypass CGNAT entirely, which would solve most of the problem.
Let me know what you think!
Reply with quote |Report
| Author | Topic: Subject: CGNAT Setup – VPN Tunnel with Static IP for Self-Hosted Services on OpenWrt |
|---|---|
|
bikemacguyver Joined: 9/14/2025 |
Monday, July 20, 2026 2:14 PM
Hello,
I have a domain registered with Dynu and currently use an ISP connection behind CGNAT (Carrier-Grade NAT), which prevents inbound connections to my self-hosted web services. I need to set up a VPN tunnel through Dynu that will: Provide me with a static IP address for DNS resolution Allow inbound traffic to reach my self-hosted services Work with OpenWrt router (I can configure custom routing) My questions: Does Dynu offer a VPN tunnel service with static IP, and if so, what is the monthly cost? If available, what are the connection details (VPN server address, port, protocol, authentication method)? Do you have setup documentation for OpenWrt, or can you provide the technical specifications I need to configure it manually? Will this service support my traffic profile (~1GB per month, up to 500 client connections)? I'm prepared to handle custom OpenWrt configuration on my end if needed. Thank you for your assistance. Best regards, Miro |
|
v66v Joined: 2/11/2025 |
Wednesday, July 22, 2026 3:06 PM
Hi Miro,
You could purchase a cheap but not slow VPS which has a static IP address, set up a VPN tunnel with your OpenWrt router, and then redirect/map your VPS ports to your self-hosted web services ports. Good Luck :) |
|
bikemacguyver Joined: 9/14/2025 |
Friday, July 24, 2026 6:02 AM
Hi v66v,
I understand—if Dynu doesn't support tunnelling, I can setup VPN from VPS on my own. However, I'm wondering if using a VPS would be overkill, especially since if I'd need to pay extra to collect A and MX records and forward them to my private NAT behind the ISP's CGNAT. I haven't tackled this type of work since the early 2010s. Alternatively, would it make more sense to host everything on a VPS instead, provided nginx and database is light? Thanks |
|
v66v Joined: 2/11/2025 |
Saturday, July 25, 2026 11:54 PM
Hi Miro,
It would be much more convenient to host everything on a VPS. However, there are two things to consider: whether you can tolerate occasional VPS downtime, and whether the cost fits your budget. I just had another idea: does your ISP assign you an IPv6 prefix? If both your server and your clients have native IPv6 connectivity, then you can bypass CGNAT entirely, which would solve most of the problem. Let me know what you think! |
Sunday, July 26, 2026 7:17 AM
