Self-Hosting Behind CGNAT

Interestingly this is something I have been thinking about as well. But I don't really feel comfortable with a full connection between a bridge and home network. I suppose this isn't that different from exposing a server in your physical network to the internet. But it still does give people potential access to your entire network when something on the bridge is configured wrongly.

Recently I did experiment with using autossh portforwarding a specific localip and port to a "bridge" vps. Where the used ssh key is restricted. The idea being that I could combine this in a docker config and just spin up a docker container to only forward traffic I want forwarded.

Which did work fine for the application I used it for, though I can imagine that due to the type of connection not all web applications work well.

Usually you also need to adjust MTU lower for this to work