How to access to my Promox server from Internet

[cdarsac]

Hi,

I easily access to the proxmox web interface from my LAN, but how to do that from Internet ?

My proxmox server is behind a livebox.

 

[datschlatscher]

Well, in theory you would just need to set up port forwarding for port 8006 on your router and then should be able to connect via the public IP address assigned to you by your ISP.
Keep in mind that this exposes your Proxmox VE to everybody else on the internet and might be a potential security risk. (Be sure to use strong passwords!)

A safer option would be to set up a Virtual Private Network (VPN) and connect from there to your Proxmox instance, which has the same effect as if you would be there physically. Setting up a VPN is a bit more work though, but generally the recommended option.

 

[virtManager]

Or at least setup something with 2-factor auth (I plan to move in that direction too, in the future)...

 

[openaspace]

Hi,

I easily access to the proxmox web interface from my LAN, but how to do from Internet ?

My proxmox server is behind a livebox.

Allow only your home/office ip as allowed,
second, install tailscale.com in the main host and log in your server using the virtual private tailscale ip instead of the plublic ip... In this way you can login when without the authorized IP

 

[bobmc]

Good tip @openaspace , just tried tailscale and it was so easy

 

[cdarsac]

Thank you very much for your response and responsiveness.

 

[openaspace]

Tailscale or wireguard are also an "antilock out" technic when for some reasons you misconfigure the wan firewall rules.

On my hosts I use a completely deny IN on wan for non Tailscale IP..(internet) and access to the proxmox service only with Tailscale net.

Obviously you can use this technique only if you don't use the proxmoy servers with nat mode for virtual machines.

Close all