0
Reverse Proxy only allowing DynDNS-IPs as alternative to VPN? (alien.top)
submitted 2 years ago by [B] to c/main@selfhosted.forum
2 comments fedilink hide all child comments
 

Hi all,
I have the following challenges:
- I have friends and family that want to access my services
- But they cannot / don't want to install any VPN
- But I don't want to open my services to the complete internet

My idea: It's good enough, if they can access the services at home. They have internet provider with dynamic IP address. In the router, you easily set a DynDNS-Service.

So: Why not just have a rule, that only allows connections of the IP-addresses of the DynDNS-Domains. Of course, the proxy/firewall would recheck the DNS entry regulary.

Someone has tried such a setup? What solution are you using? Do you think it's similar secure as a VPN? (of course HTTPS connections only via Letsencypt cetificiate)

all 2 comments

sorted by: hot top controversial new old
[–] [B] 1 point 2 years ago (1 child)

It sounds like your friends and family are actually the administrators of your network 😁

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] [S, B] 1 point 2 years ago

    Haha, for my parents it's better to change an unvisible setting in the router, instead of placing a raspberry pi in their network or installing WireGuard on every device. They are paranoid with any software that must be installed :D

  • permalink
  • fedilink
  • source
  • parent