• 5 Posts
  • 28 Comments
Joined 2 years ago
cake
Cake day: August 8th, 2023

help-circle





  • I have dynamic dns through cloudflare that provides a proxy ip address for me in addition to some protections.

    After that I use a reverse proxy to route specific domain names to services. My router is set up to forward only ports 80 and 443 to that reverse proxy, so there’s a good layer of safety there. There could be a weakness on the router, but at this point traffic is pretty limited.

    After that, at least for your service, if you can have some control or throttling of signings and be more selective about who you let in, then that could help.

    I say do it. Sure there’s risk someone could put something on there you don’t want, but I wouldn’t say it’s big enough to not do it.
















  • There’s an idea. I may play with it tomorrow.bill be back on the road, so I’m not keen on doing too much when I can’t fix it haha. But right now the router is DNS, so when I did traceroute there was only one stop. But it was the SSL termination that got me. I might be able to download the stream module for Nginx. I think if I wanted to be optimal I may have to totally restructure that part…

    Edit: thank you for the feedback, you’ve given me something to think about