请教下 duckdns 的问题

This topic created in 1135 days ago, the information mentioned may be changed or developed.

情况说明：

1 、没有公网

2 、需求是访问家里套了 duckdns 的 bitwarden

3 、目前在外是通过改 host 加 tailscale 的方式访问 bitwarden

想请教下，只能通过改 host 才能访问家里的服务吗？如果非得这样，那么移动端该如何访问？

bitwarden

duckdns

访问

host

6 replies • 2023-04-27 02:59:05 +08:00

luckjoe680

Apr 25, 2023 via Android

你没有公网套 duckdns 是有什么用呢？

Thunderaxe

Apr 25, 2023 via iPhone

@luckjoe680 用来给服务上 https

totoro625

Apr 25, 2023

1 、试试最新的 Tailscale 新功能 Tailscale Funnel： https://tailscale.com/kb/1223/tailscale-funnel/
2 、cloudflared tunnel 内网穿透
3 、frp 内网穿透

Thunderaxe

Apr 25, 2023 via iPhone

@totoro625 好的谢谢我试试

luckjoe680

Apr 25, 2023 via Android

@zbzzhh 没有公网 ip 的话用自签名的就行了

Thunderaxe

Apr 27, 2023 via iPhone

@totoro625
研读了 tailscale 文档发现是 DNS REBINDING PROTECTION 的问题，如下：

DNS servers that have DNS rebinding protection enabled will block DNS responses that include a private IP address. On the public Internet, that does not cause any problems because public websites do not use private IP addresses. When accessing devices on your private network, this becomes an issue if the DNS names of those devices are visible to public DNS servers because sometimes those DNS responses will be blocked.

试了下官方的一个临时方法解决了：

Use the Tailscale DNS configuration with the ‘override local DNS’ option enabled to send all DNS queries (other than MagicDNS or domain names configured to use specific nameservers) to a public DNS service that does not include DNS rebinding protection. This is similar to the previous option but applies to the entire tailnet.

谢谢各位，现在可以通过 tailscale 访问 duckdns 记录的内网 ip 域名了。