How to securely open port 8080?

Question

Computer networks

There is a PC on which UTM EGAIS is installed, access to which is carried out at 127.0.0.1:8080 and the exchange takes place with xml requests. The PC is connected to the Internet, and if port 8080 is opened on it, then you can connect to this UTM via the Internet, specifying the IP address of the PC instead of 127.0.0.1, and the exchange of requests will work. The problem is that you need to provide such access to a remote server, but I don’t know how to do it safely, I assume that you need to establish a vpn tunnel, but I also have no idea how to deal with a remote server.

Answer 1

you can allow access to 8080 only from a specific IP - but this is protection from the pioneers. It would be correct to actually build a VPN - and allow access to 8080 only from the VPN address range

Answer 2

First of all, you need a normal router with a flexible Firewall and the ability to set up a VPN server. Look towards Mikrotik.
It is not safe to open 8080 outside because this port is scanned by default. If with a router without a VPN, then you must forward through a different port. For example, open port 54545 on the router and forward it to the desired one - IP: 8080.