Connecting to the 1c database via the Internet?

Question

1C-Enterprise

There are 2 computers in the local network with 1c 7.7 (27). Database on Ms sql 2005. OS Win7.
You need to connect another computer to this database, but not via the network, but via the Internet.
Maybe someone already did, share advice.
Will it work if you set up network simulation through Hamachi? And if so, how to set it up correctly?

Answer 1

The designated task can be implemented in two ways, using two different implementations of VPN (Virtual Private Network) technology:
1. Raise a VPN server on a computer acting as a SQL server(or on another host launched while using 1C by a remote employee). This can be done using standard Windows tools (PPTP VPN). Pros: quick and easy to set up; no need to install third-party software; supported by almost all modern operating systems. Cons: PPTP has long been considered an insecure solution (including according to Microsoft), which can be a significant nuance when working with confidential data. The second option is to use third-party tools to create a virtual private network (see VPN types). For example, a simple, free and stable way is OpenVPN. Pros: easy; considered secure enough (this setting depends on VPN server encryption settings); almost all configuration questions can be quickly answered online due to the great popularity of the product; there is client software for almost all desktop and mobile operating systems. Cons: At the beginning, you will have to spend a little time reading the instructions (a simple overview of the parameters of the server/client configuration files will suffice for a start); you need to install third-party software on the server and remote computer, although it is free and requires minimal hardware resources.
2. Set up a VPN server directly on the router. But this method depends on the specific network equipment used in your office. Many modern routers (including home ones) have a VPN server function (see the documentation for your equipment). Pros: as a rule, the network router is always active, which means that a remote employee will be able to connect regardless of the state of the host that acts as a VPN server; no need to forward the ports used by the VPN on the router to forward external connections to a server on the local network. Cons: you will have to configure not only the PC of the remote employee, but also the 1C server (in client mode); VPN functionality is tied to the capabilities of the router.
Regarding Hamachi- this is indeed a very simple solution, but it can be called rather temporary and suitable only for companies with a very small number of users and do not require the stability / flexibility of a private virtual network. My experience with Hamachi ended up refusing to use this product due to a large number of negative nuances. I will not describe them in detail here - these disadvantages are described in detail on the net.
PS Important note- to create a virtual private network in your office (where the 1C server is located), the Internet provider must provide a static external ip-address service. Some providers provide it by default, some - for a fee. If these two options are not suitable, you can use Dynamic DNS - a service that gives you a free domain, through which you can connect to a server or router with a dynamic ip. You only need to configure the software necessary for ddns to work (the easiest way is directly on the router). Today, some dynamic dns services are paid, but there are many free ones.