--- title: How to self-host servers in your living room on static IPs description: A detailed guide on setting up a Linux-based home router using L2TP tunneling via Andrews & Arnold (A&A) to obtain static IPv4 and IPv6 addresses, bypassing... canonical: https://daily.dev/posts/how-to-self-host-servers-in-your-living-room-on-static-ips-51tfvf9sq twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How to self-host servers in your living room on static IPs | daily.dev og:description: A detailed guide on setting up a Linux-based home router using L2TP tunneling via Andrews & Arnold (A&A) to obtain static IPv4 and IPv6 addresses, bypassing... og:url: https://daily.dev/posts/how-to-self-host-servers-in-your-living-room-on-static-ips-51tfvf9sq og:image: https://api.daily.dev/og/posts/51tfvF9SQ.png og:image:alt: How to self-host servers in your living room on static IPs og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How to self-host servers in your living room on static IPs **[Lobsters](https://daily.dev/sources/lobsters)** · 17 min read · 0 upvotes · 0 comments ## Summary A detailed guide on setting up a Linux-based home router using L2TP tunneling via Andrews & Arnold (A&A) to obtain static IPv4 and IPv6 addresses, bypassing CGNAT restrictions from your primary ISP. Covers Debian configuration including network interfaces, PPP over L2TP with xl2tpd, packet forwarding, automatic reconnection via cron, PTR/reverse DNS setup, MTU considerations, and security recommendations for running an open public-IP network at home. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 1 discussion and 10 comments across lobsters (as of 2026-07-26). **TL;DR:** The Lobsters community largely treats this post as a jumping-off point to share alternative self-hosting approaches (Cloudflare Tunnels, WireGuard/Tailscale + VPS, tinc, BGP/ASN setups), with mild skepticism toward Cloudflare and general appreciation for the variety of solutions available. **Sentiment:** 40% positive · 40% mixed · 20% skeptical **The case for** - Running sshd on a non-standard port combined with a honeypot like endlessh on port 22 effectively eliminates brute-force log noise. - Overlay networks like WireGuard/Tailscale with a small reverse-proxy VPS offer a simpler, lower-maintenance alternative to L2TP tunneling. - Running your own ASN with BGP sessions through VPS providers gives full control over publicly routable IPv4/IPv6 addresses from home. **The pushback** - Cloudflare Tunnels, while convenient, put Cloudflare in a MITM position for a large portion of internet traffic and raise privacy/government-access concerns. - The article's security recommendations (key-only SSH) are incomplete without also addressing port obfuscation or honeypot strategies. **By community** - lobsters (mixed): Commenters appreciate the topic but quickly pivot to discussing alternative approaches (Cloudflare Tunnels, WireGuard+VPS, tinc, BGP/ASN), suggesting the L2TP method is just one of many viable options rather than the obvious best choice. **Hottest debate:** Whether Cloudflare Tunnels are an acceptable convenience trade-off given Cloudflare's MITM position and potential government ties. **Open questions** - What are the practical trade-offs in complexity and reliability between L2TP tunneling, overlay networks, and running your own ASN for home self-hosting? - How maintenance-intensive is a reverse-proxy VPS + WireGuard/Tailscale setup compared to a direct static-IP tunnel approach? **Highlights** > ...except for the minor nitpick that Cloudflare is evil and is currently MITM for a huge chunk of the Internet, and likely are in bed with the US government... > — [johnklos on lobsters · 5 points](https://lobste.rs/s/sh9bbn/how_self_host_servers_your_living_room_on#c_8hxirr) > or using a reverse proxy on a small vps, and connecting the machines with an overlay network like wireguard or tailscale > — [ine on lobsters · 5 points, 1 comments](https://lobste.rs/s/sh9bbn/how_self_host_servers_your_living_room_on#c_ecgmdq) > I do it with [ranet](https://github.com/nickcao/ranet) and run Babel on top of the IPsec mesh with [BIRD](https://bird.nic.cz/). All my machines (nixos btw) have publicly reachable v4/6 address advertised under my own ASN and IP blocks thru a few VPS providers with BGP sessions. Took me a while to wire up vrf and play with segment routing, but it’s a very interesting and fun learning experience ;) e.g. I have a [public NTP server](https://time.ysun.co/) (with nts ofc) in the pool in my shitty apt that had already served probably over 10B requests behind sfr copper wire > — [ysun on lobsters · 3 points, 1 comments](https://lobste.rs/s/sh9bbn/how_self_host_servers_your_living_room_on#c_q1sz5k) > My experience is that you have to run something else on TCP port 22 before the user name guessers don't try your *real* `ssh` on some other port. I've got skeeto's `endlessh` running on port 22, `sshd` on some higher port on one of my servers. It gets virtually no guesser traffic. `endlessh` gets a ton of traffic. Before I had that setup, my higher port `sshd` got quite a bit of traffic. > — [bediger4000 on lobsters · 1 points](https://lobste.rs/s/sh9bbn/how_self_host_servers_your_living_room_on#c_febucq) **Source threads** - [lobsters](https://lobste.rs/s/sh9bbn/how_self_host_servers_your_living_room_on) · 10 points · 10 comments ## Similar posts on daily.dev - [Self-Hosting Behind CGNAT](https://daily.dev/posts/self-hosting-behind-cgnat-lrdls1bcr) · Lobsters · 1 upvotes · 0 comments - [I reach every service on my home server from anywhere without opening a single port](https://daily.dev/posts/i-reach-every-service-on-my-home-server-from-anywhere-without-opening-a-single-port-qgiwzdz5k) · XDA Developers · 0 upvotes · 0 comments - [How to turn anything into a router](https://daily.dev/posts/how-to-turn-anything-into-a-router-n8fniwjoc) · Hacker News · 0 upvotes · 0 comments - [My ISP quietly put me behind CGNAT, and it broke half my home lab before I noticed](https://daily.dev/posts/my-isp-quietly-put-me-behind-cgnat-and-it-broke-half-my-home-lab-before-i-noticed-yzswv0vyk) · XDA Developers · 1 upvotes · 0 comments - [Using Tailscale's Peer Relays to fix a homelab connection from across the globe](https://daily.dev/posts/using-tailscale-s-peer-relays-to-fix-a-homelab-connection-from-across-the-globe-cnl8nn7bx) · Tailscale · 0 upvotes · 0 comments --- Tags: [#linux](https://daily.dev/tags/linux), [#networking](https://daily.dev/tags/networking), [#self-hosting](https://daily.dev/tags/self-hosting) [View this post on daily.dev](https://daily.dev/posts/how-to-self-host-servers-in-your-living-room-on-static-ips-51tfvf9sq) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How to self-host servers in your living room on static IPs","url":"https://daily.dev/posts/how-to-self-host-servers-in-your-living-room-on-static-ips-51tfvf9sq","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-to-self-host-servers-in-your-living-room-on-static-ips-51tfvf9sq"},"datePublished":"2026-07-26T14:25:20.951Z","dateModified":"2026-07-26T14:26:03.620Z","description":"A detailed guide on setting up a Linux-based home router using L2TP tunneling via Andrews & Arnold (A&A) to obtain static IPv4 and IPv6 addresses, bypassing...","image":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","thumbnailUrl":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","isAccessibleForFree":true,"articleSection":"Lobsters","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Lobsters","logo":"https://media.daily.dev/image/upload/s--tl8v_Fku--/f_auto,t_logo/v1698841318/logos/lobste.jpg","url":"https://daily.dev/sources/lobsters"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-to-self-host-servers-in-your-living-room-on-static-ips-51tfvf9sq","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"linux,networking,self-hosting","timeRequired":"PT17M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Lobsters","item":"https://daily.dev/sources/lobsters"},{"@type":"ListItem","position":3,"name":"How to self-host servers in your living room on static IPs"}]} ```