Build your own internet site

1. Regarding the construction of the intranet server, please refer to my k8s continuous integration . Now we need to expose these services or these websites to the public network.
1. First, you need to purchase a domain name (purchase channel: Tencent Cloud, Alibaba Cloud, or a well-known domain name management organization). I purchased it: yuanzhibin.com 2. You need
a public IP of your own, which can be purchased on these public clouds Or the operator, I installed the optical modem of China Telecom, and asked for a public network IP from China Telecom. I set the optical modem as a bridge and dialed with my own router. From the background of the router, you can see that the WAN IP address is a public network IP

3. Configure this IP to the domain name you purchased, for example, mine is Alibaba Cloud, find the domain name resolution menu, and match the public network IP of the router:

4 , Verify that you can access your domain name from the Internet:

access seat.yuanzhibin.com in the above figure, and the accessed IP is 119.131.47.79. This means that I can already access my intranet.
5. You need to expose your service through the router, enter the background of the router, select the port mapping menu, and map a certain port of a server on the internal network to the external network: unfortunately, telecom operators use 80, 443,

etc. The port is banned, which may prevent users from building their own personal websites. So I had to map to other ports, I mapped 80 of the intranet to Internet 9080, and 443 of the intranet to 9443 (the port 8091 in the above picture is the port of my distributed transaction, of course the port of the distributed transaction should not be mapped to the external network), so accessing through the Internet is very awkward. For example, if I want to access my build service now: https://jenkins.yuanzhibin.com:9080, I need to bring the port I mapped to the external network.

Telecom operators say that the public network IP is limited, and they will refresh the IP regularly, so I don't have a fixed public network IP, so I need to change the domain name configuration frequently. It is said on the Internet that there is a router that can be configured with a dynamic domain name, but I have not tried it.
6. I want to access my ceph service now: https://rookceph.yuanzhibin.com:9443

said that the service of my domain name cannot be trusted, and it may be deceiving the website. This is because I did not go to the authoritative certification authority to do it for this domain name. Authentication and signature. Therefore, the browser reminds the user that this website is untrustworthy, so please visit carefully and choose to continue to visit.