Hello,
I’m using Nabu Casa Cloud for HA access outside of local network.
On the Home Assistant Android app:
works fine when on local Wi-Fi
works fine when on mobile network
doesn’t work when on non-local Wi-Fi (says HTTPS handcheck fail)
In the app, external URL is set to “use Home Assistant Cloud”, local URL is set to null, local Wi-Fi is set to the local SSID, I have given full always permission to localization / position.
I own the “non-local” Wi-Fi, so I disabled IPV6 and any kind of filtering / protection.
Also changed DNS on Android to Google but still has the same error.
I feel I done everything right and checked every common issues (DNS, IPV6, SSID issues) but it still doesn’t work when I’m on another Wi-Fi…
Forgot to mention but I did try it and still doesn’t work.
Is there any way to investigate the real error and check which URL is actually called? Is there any logs from the app available somewhere?
No I can’t connect it from my “non-local” Wi-Fi, either phone or laptop. Only works if using a VPN or different Wi-Fi. Looks like my public IP address is blocked but the IP ban list is empty.
On laptop the issue is “better”, error connection closed. I can ping the url, dns resolve the IP of my remote access Nabu Casa url but can’t connect to it. Connection closed every time
Is it happening on only one non local WiFi or all of them? If only one specific - is it by chance using the same IP subnet that your home WiFi? I have the same case when I visit my parents, and they have the same setup of WiFi as I do in my location, so companion app apparently thinks that I’m at home and tries to connect locally, instead of using remote URL. For such scenario I switch on Tilescale to my home and everything works fine again.
Home 2 Wi-Fi (different house, fixed IP) => Does not work
Neighbor Wi-Fi => Works
Parents Wi-Fi => Works
Let’s put the Android app away for now as it has the same behavior on my laptop in a browser (remote url works everywhere except Home 2 Wi-Fi, error connection closed by Chrome).
Like said before, on my laptop in Home 2 Wi-Fi, ping works, dns lookup works, only SSL connection is blocked (verified with openssl).
So what would be the issue since the HA doesn’t seem to have banned my IP?
What is address you ping? External URL of your Home 1 or directly IP? Or do you use any sort of VPN (LAN2LAN) connection between houses? Do you use any sort of DNS rewrites in your config (AdGuard Home, PiHole, local DNS on router, etc.)? If you use ping to DNS does it resolve to your Home 1 IP? If connection is blocked by SSL, it looks like while connecting from Home 2 you are connecting to wrong IP, so you can’t get proper/expected certificate from target server…
Trusted Network Settings in HA doesn’t change anything.
Ping to DNS does resolve to IP of House 1 (everything works until TLS handcheck, diagnosed with curl).
If I use a VPN, it works.
If trying to connect from IP instead of DNS name, same error.
From what I see, either my internet router in House 2 blocks the TLS handshake but doesn’t show it in the configuration interface (I turned off all securities / filtering / firewalls) or my internet provider blocks the connection (most likely from what says Gemini).
Either way, I don’t see any solution so I will just use shared connection from my phone when I want to access HA from my computer in House 2 which is unfortunate.
In such scenario I’d use tailscale. Set it up as app on your home assistant and instal client on you phone. Then it is just the matter of flipping on the VPN connection on phone and you should be able to access HA over WiFi from Home 2. Yet it requires this small additional step and is not fully automatic
