Self-Hosting in Malaysia: Overcoming CGNAT for Your Homelab

PublishedJuly 9, 2025

I am a developer from Malaysia. I work with PHP most of the time, recently I fell in love with Go. When I am not working, I will be ballroom dancing :-)

Part of seriesProTips

Comments (1)

Join the discussion

sussy_weeb11mo ago

Good day, Mr.Hong, thank you for sharing this blog post, reading it has helped me plan for my homelab networking to be used outside of my local network. Regarding the ISP in Malaysia using CGNAT, i am abit confused because when i query chatgpt regarding external access to my computers, it mentioned that using DDNS would not work if the ISP is using CGNAT, but i would assume that you got it working using DDNS, would it mean that the ISP in Malaysia are not using CGNAT? Thank you for reading. Your insight in this topic would be much appreciated.

Hong11mo ago

With CGNAT, you are sharing a pool of public IPs with other subscribers. So even with DDNS setup, incoming connections will not be forwarded to you. You need to get a dedicated public IP address.

I am a MAXIS Fiber subscriber, MAXIS is using CGNAT. Setting up DDNS alone is not enough. In this article I mentioned additionally paying RM 10.00 monthly for allocating public IP. That allocated (dynamic) public IP will be dedicated to me and not shared with other subscribers. Then I setup DDNS to point (sub)domain names to this public IP.

Hong11mo ago

Btw, I am not sure if all Malaysia ISP use CGNAT. Based on my experience, TM and MAXIS are both using CGNAT.

Dikshant Sehgal (Dikshant)1mo ago

Hi Hong,

Your guide on beating CGNAT for a Malaysian homelab is genuinely useful, especially the RM 10 public IP tip. After someone requests that public IP from their ISP, they usually want to confirm it actually changed. I run whatsmyiplive.com , a free tool that shows the current public IP with no signup. It could be a small addition right after the public IP allocation step. Thanks for the clear writeup.

Dikshant

ProTips

Part 4 of 10

Tips and tricks to make life easier. Work smart, be a lazy programmer.

Up next

Dopamine Driven Development

Dopamine, often associated with happiness and pleasure, can be harnessed to improve productivity and motivation, especially in the context of software development. The speaker shares personal experiences of overcoming boredom and frustration as a jun...

More from this blog

Cron Prompts vs Agent Skills: A Separation of Concerns

Most AI agents that support scheduled tasks have two sources of instruction when a cron job fires: The cron prompt — the task-specific instructions you wrote when scheduling the job The skill — a re

Jun 17, 20265 min read14

Cron Prompts vs Agent Skills: A Separation of Concerns

Da Ma Cai 大马彩 API

TL;DR Scarp draw result, host on GitHub, retrieve it like API at damacai.hongineer.com. Data Scraping I have previously shared a technique for scraping Da Ma Cai draw result. Now I finally have time t

Feb 26, 20261 min read45

Monitor MySQL Replication Status with a Bash Script

This is a Bash script that check if the replica (slave) health status. If there is an issue, it will exist with non-zero status. This is useful when used with monitoring tools like [Monit](https://mmo

Feb 24, 20262 min read25

Monitor MySQL Replication Status with a Bash Script

Cheatsheet & Examples: chmod

chmod is a command-line utility used to change the access permissions of file system objects such as files and directories. It allows you to control who can read, write, and execute those objects. Changing Permissions Using Octal Notation Example Usa...

Jan 23, 20263 min read21

Cheatsheet & Examples: chown

chown changes the ownership of files and directories. This involves modifying the user and/or group associated with a file, determining who has access and permissions. Changing File Ownership to a Specific User Example Usage: chown user file.txt What...

Jan 20, 20263 min read16

Hong's Tech Blog

111 posts

The blog is older than you know. I prefer counting from the emergence of one integral anomaly to the emergence of the next, in which case this is the forth version.

Dreaming of running your own server or "homelab" in Malaysia? Many internet service providers (ISPs) like TM Unifi and Maxis Fiber utilize Carrier-Grade NAT (CGNAT) for IPv4 address management. This means your home router is assigned a private IP address, not a public one, which prevents direct external access to your server or even your Wi-Fi camera when you're away. But don't worry, there are effective solutions!

The RM 10 Solution: Public IP Allocation

Both TM Unifi and Maxis Fiber offer a straightforward solution: a public IP address allocation for a nominal monthly fee of RM 10. Simply contact their customer service hotline to request this. They will schedule a date for the change, which usually just requires you to restart your router. The best part? No complex configurations are needed on your end.

Important Note: This is a dynamic public IP address, meaning it will change periodically. For seamless access, you'll want to pair this with a dynamic DNS solution (covered next).

Seamless Access with a Domain Name and Dynamic DNS (DDNS)

Constantly tracking a changing IP address is impractical. The ideal solution is to use a (sub)domain name to access your homelab. This is where Dynamic DNS (DDNS) comes in.

My Preferred Method: Custom Domain with Cloudflare

I personally recommend purchasing your own domain name (e.g., from Namecheap) and managing its DNS records through Cloudflare. Cloudflare offers robust DNS management and additional security features. To keep your domain linked to your dynamic IP, you can set up a cron job to execute a simple shell script that automatically updates your DNS records via the Cloudflare API. (Pro-tip: AI tools can even help you generate this script!)

Free Alternative: Duck DNS

For those on a budget or looking for a quick setup, Duck DNS provides free subdomains and ready-to-use scripts for automatic DNS record updates. Additionally, if your router has built-in Dynamic DNS (DDNS) support, you can often configure it directly with a service like Duck DNS for automatic IP updates.

Advanced Connectivity Alternatives

For more robust or specialized homelab setups, consider these advanced methods:

Tailscale: This creates a secure mesh VPN network between your devices, allowing you to access your homelab as if all your devices were on the same local network, regardless of their physical location or underlying network configuration (including CGNAT). It's excellent for secure, direct access.
Cloudflare Tunnel: This service securely connects your internal applications and servers to Cloudflare's network without exposing any public IP addresses or opening firewall ports. Traffic is proxied through Cloudflare, providing enhanced security and performance, and it's particularly useful for exposing web services.

By implementing these strategies, you can easily overcome the challenges of CGNAT and unlock the full potential of self-hosting your homelab in Malaysia.

Command Palette