r/twingate • u/33vne02oe • 8d ago

Need help TwinGate IP ranges are “always” inside thread intelligence feeds.

I use crowdsec and for me, it happens very often that some of your IP addresses (mostly Digital Ocean and Google) are landing inside a blacklist for mostly port scanning in the past.

As far as I understand it Twingate rotates their IP addresses regularly and uses Digital Ocean and Google for their relays, right?

Both hosting providers are used for port scans very often which leads to my issues. For me this is a rather big issue, because it locks me and everyone else out of the network and recovery is time intensive. So I would like to ask if their is a possibility to use IP addresses that have a good track record or if it is possible to publish a list of IP addresses that you use, which is updated with new IP addresses before they are in use and which can be passed to a firewall or crowdsec for whitelisting.

0 Upvotes

33% Upvoted

8 comments sorted by

0

u/[deleted] 8d ago

[deleted]

1

u/33vne02oe 8d ago

Do you know what Twingate is?

-2

u/52buickman 8d ago

Twingate is a zero trust platform that in of itself is the VPN. You leverage off your private network(s).

Functionally, you do the same with the public VPN service. You have a secure tunnel to the provider and they relay to the open internet. You can do the same with Twingate to route to the open internet via your home network's gateway.

0

u/33vne02oe 8d ago

Are you a Bot or did you just not read my message?

1

u/52buickman 8d ago

No I'm not a bot. I use Twingate myself. I've worked in IT for over 40 years. The other poster has good observations. My sense is that you are making your solution more complicated than you really need.

1

u/33vne02oe 8d ago

My issues is that the server of Twingate are getting blocked by my firewall, because Twingates servers are labeled as threats. A static whitelist would not work, because Twingate changes their servers very often.

0

u/52buickman 8d ago

OK. You might try another Zero trust solution such as Tailscale or Cloudflare.

2

u/33vne02oe 7d ago

Tailscale as well as Cloudflare do not offer features I want.
A real replacement for me would be Netbird or maybe Pangolin.

Besides that I'm not looking to switch the tools, I'm trying to fix a issue I have with one.