Cloudflare has dynamic DNS as well as a client to run on your server that will update automatically for you.

40 Mbps is the amount of data that can be moved in one second; the difference between 20% saturation and 90% saturation should have negligible impact on latency. The bottleneck would occur if you OVERsaturate the line (ie. trying to pull more than 40mbps down) because then the packets would need to take turns coming in and possibly even be re-sent from the source if the latency is so bad that those packets are wiped from cache on routers or switches. (FUN FACT: this is basically how a DDOS attack works, too many packets are being thrown at your network and your router can’t say “no” fast enough to the bad data so latency approaches infinity and the good data ends up getting buried as well)

Mbps is a measurement for bandwidth not latency. However, it’s a little confusing what OP wants based on the image alone. The question marks in tandem with the bandwidth values makes me assume OP wants to know their outbound bandwidth but they are clearly asking for latency in the post text.

Did you ever figure out what was causing your issues?

It’s a feature of Git. Read up on git/GitHub before you try to tackle this.

I have 2 pi 4. One of them runs Vaultwarden as my self-hosted password manager. The other runs TPLink Omada SDN management software to manage my switch and WiFi APs.

OP, are all of the working-as-expected VMs also members of the virbr0 network?

I’m thinking that this is a firewall issue on your VM host. If you DO NOT have any other working VMs then could you try disabling the firewall on the VM host and see if the VM can receive DHCP traffic.

No, then the VMs would get their own subnet. You want the NIC bridged so that the router actually sees the VMs.

Would like to know this too. I have a 1600x sitting in my spare parts box since my desktop upgrade about a year ago. Been wondering if it’s worth it to set up some kind of game server with it.

You mentioned that you disabled the NGINX instance installed by Bitwarden, don’t do that. Just change the port that it is hosting on and then point NPM at that port. You can also set the Bitwarden NGINX conf to use a self-signed certificate and then use NPM to manage the real cert.

I already do use firewall rules, this is just an extra step I take to segment things which also serves to make it a bit easier for me to remember certain addresses. It is entirely unnecessary, but I like it this way.

Let’s say I have a static IPv4: 72.235.228.162

And IPv6 block: 2660:1100:45f0:c17:: /60

What I do is set up a Virtual IP in OPNSense and give it the address 2660:1100:45f0:c171:72:235:228:162

Then I set up the firewall rules for that IP.

Then I NAT 1:1 that IP to the NGINX VM’s IP and now the Internet doesn’t need to know about it.

If you like Mail-in-a-box just wait until you check out Mailcow!

I use NAT on IPv6 so that I control which IP address is exposed. I’ve got /60 and all of my home devices are assigned unique IPs. What I like to do is set up a V6 address that uses the same numbers as my static V4 address and NAT that to my NGINX box, basically using the router assigned V6 as a “local” address.

NAT certainly exists in IPV6, I use it on my home network for my nginx proxy VM. I cannot, for the life of me, figure out how to change the IP on the host so I do NAT on my router. 🤷‍♂️

Yeah, I gave up because it wasn’t really necessary for me. I have a /29 plus I can open ports so I just decided to set up an SMTP relay on my VPS because my ISP blocks outbound on port 25. I can still do inbound on port 25 so no issues receiving emails. It actually might benefit you to have an SMTP relay on the VPS to properly route the outbound email if you don’t want to have two Wireguard tunnels running.

One quick tip for your email setup - you want to set up routing rules (not NAT). I struggled with this for quite a while before I eventually gave up though. I started to write a tutorial but it remains unfinished. Check it out, might be helpful for you. https://github.com/madeofstown/Wireguard-VPS-Port-Forward

That’s pretty standard for nearly every router and Internet connected device. There is almost always a setting for Primary and Secondary DNS servers. Sometimes you can even set more (ie. 2 IPv6 DNS servers in addition to the 2 IPv4 DNS servers)

Same, IONOS is cheap and I had no issues when requesting they open port 25 for my mail relay server.

Thanks to your comment I gave termux another try and finally figured out what I was doing wrong (pgk updates never working). DO NOT install termux from the Play Store, use FDROID. If you use the play store version you have an old and outdated version with old and broken package repos.

If you haven’t already, check out Proxmox. It’s an operating system that specializes in running Virtual Machines. If you run Proxmox at home you can have all the features that you just mentioned and more.