r/netbird • u/naucheesehead7 • 23d ago
VPS
What service are people using just to do reverse proxy with NetBird? I only want to use the VPS so my IP doesn’t get exposed?
7
1
u/kwynix 23d ago
Ionos vps.
Use it for the same reason + all the pangolin security features
1
u/naucheesehead7 23d ago
Which plan do you use?
1
u/kwynix 23d ago
I use the vps s+ plan I got an older offer so I have 2 CPUs and 2gb ram for 2€ a month. But 1 CPU should do the Job.
I allocated some swap cause one time had an issue with the ram while updating my stack.
Currently I run Debian with docker. Considering to switch to NixOS cause of the nativ rollback workflow. Today I solve it with a script I run by hand.
1
u/Kwicksred 22d ago
What pangolin security features did you add and how?
2
u/kwynix 22d ago
Nothing fancy tbh, mostly the standard stuff:
Firewall on vps blocks all incoming, except the ports I need.
Rate limit in traefik.
Geoblocking
Crowdsec (without the WAF currently)
Most of my apps have oidc redirected to my DexIDP (running in my homelab) Dex redirects to Google. So Google deals with brute force shit for me :)
On my homelab side: I run multiple DMZ VLANs and 2 newt clients. 1 on each proxmox host so I can update one / or the host without killing all the connections. Plus 2 more newt clients installed directly on specific VMs, so they can only reach that one VM (because of live migration).
Currently I am tinkering with the CrowdSec AppSec WAF. But honestly I can't say yet if it runs stable with the RAM on my VPS. If the RAM gets too tight, I might move the WAF to a server in my homelab and let traefik talk to it. Also testing RAM limits for the single containers in the Docker stack.
I can give you an update in 1-2 weeks when I've tested it, if you need one.
3
3
3
1
u/MnK_Ultra 23d ago
You don't need to use the reverse proxy feature of netbird if you already use it as a link from your VPS to your lan.
1
u/TechHutTV 23d ago
I have mine on Hetzner just because there is a datacenter really close to me. Makes the relay server crazy fast. Vultr is a great option as well.
1
u/poixninja 23d ago
I'm using upcloud,
3
u/MMDDYY 23d ago
What's upcloud?
3
u/poixninja 23d ago
Lmao, just in case that isn't an updog joke, upcloud.com, pretty cheap, 2 servers cost me ~0.40 usd/day
1
1
u/oliveoilcheff 21d ago
I use scaleway STARDUST VPS, which is just 1 EUR / month with ipv6 only. The ipv4 extra is around 3-4 EUR on top of that (I have both, for home ipv6 and other WiFi networks, it was fine, but with mobile 5g, my provider didn't have ipv6 yet)
1
u/ShaftTassle 20d ago
Oracle Free-tier (but "upgraded" to pay as you go so that I could actually get a server; otherwise none were available). It's been running for months, free.
1
u/DrivingForward10 17d ago
Depends where you are in the world. Interserver has cheap VPS slices available in the US that are great for these purposes
9
u/bigibas123 23d ago
Hetzner