Large photo backups fail behind CGNAT and Cloudflare Tunnel
A runs Immich, Nextcloud, Jellyfin, , and other storage services. The home connection provides 1 Gbps in both directions, but it sits behind CGNAT because a static or public IPv4 address is very expensive locally. makes ordinary web services reachable from outside the home.
Uploads fail, however, when videos or photo backups exceed Cloudflare's 100 MB request-size limit. Tailscale works well for personal , but requiring a family member to install it and switch it on and off creates too much friction. The needed setup must let photo syncing and backups work automatically through an app or a normal HTTPS address.
A local DNS setup is also being considered for access from inside the home.
Key points
- Uploads larger than 100 MB fail when they pass through .
- The home has a symmetrical 1 Gbps connection but is behind CGNAT.
- Tailscale already works for the server operator's .
- Family photo backups need to work without manually enabling another connection.
- Local DNS is being considered to give devices a direct route while at home.