logoalt Hacker News

j45last Thursday at 1:50 AM1 replyview on HN

Public facing services routed through a firewall or waf (cloudflare) always.

Backend access trivial with Tailscale, etc.


Replies

palatalast Thursday at 9:31 AM

Stupid question probably, but: how can it not be routed through a firewall? If you have it at home, it's behind a router that should have a firewall already, right? And just forwards the one port you expose to the server?

Cloudflare can certainly do more (e.g. protect against DoS and hide your personal IP if your server is at home).