Answer the question
In order to leave comments, you need to log in
How to work remotely via home white IP?
I work from home on one customer site, access to the site is only from my home IP and from the customer's IP, respectively, so Apache is configured. I plan to go to another city for a couple of weeks and work remotely with the site, how can I do this, how can I change the IP to my personal one? adding a new IP to those allowed to access the site will not work because I plan to distribute the Internet from the phone and there the IP is not white but is constantly changing. Of course, there was an idea to leave the desktop PC constantly turned on at home for the duration of the trip and pick up on teamviewer, but it seems to me that this is not very convenient.
Answer the question
In order to leave comments, you need to log in
For this it is better:
- configure basic-authorization| - this will allow you to "protect" the site from strangers
- configure VPN
- on your home router (computer)
- on the server
In the Windows days, I solved this problem using RDP. To start the computer, I used the BIOS to wake up at a certain time.
Now (Linux) I use VNC for access. For awakening - Wake-On-Lan. I send the WOL signal from the WEB admin panel of the router (it does not allow such commands from the outside, but there are better routers). The IP on my home computer is white, but dynamic. Hence DDNS. Some providers provide this themselves, but this is not my case (Rostelecom does not know how). So, too, by means of a router.
Accessing the site by IP in your case (static white address on a personal PC) when accessing via RDP / VNC is not a problem. In my case, I had to (with the highest paranoia) configure nginx each time to a new address. With less paranoia - IP ranges. True, ssh is available from any address, but only with a certificate.
While you are away, they can turn off the light, the system may freeze, etc., etc.
IMHO, you either need to agree with the customer to remove this restriction
Or throw it through a server on the Internet, which you can easily restart in case of a freeze. The cheapest VPS / VDS for 50 rubles is suitable.
You can throw it through ssh, for example.
I have a Mikrotik router there that can be configured at least as a proxy, at least as a VPN, i.e. you connect to the router and already work through it, from your ip.
If there is no normal router and turn off the computer, then IMHO there is no way to work from this ip, since ip is tied to "home" authorization.
Again, IMHO, in order not to invent crutches, you can ask the customer to configure another authorization option on the server, for example, open ssh, as a security, you can change the port and include a certificate.
Or use the dynamic addition of ip-addresses for a while, using Port Knocking technology.
There are a lot of options in general.
If you have the opportunity to leave a device turned on at home (not any, of course, a refrigerator will not work), then you can set up a proxy on it. If you leave the PC, you can set up vpn or socks5-proxy on it (because of the telegram there are a lot of tutorials on how to do this today). The same can be done through a router (we wrote about this above) or, for example, a small piece of iron raspberry pi.
In general, I advise you to discuss other options to solve security issues. For example https with client certificates https://medium.com/@sevcsik/authentication-using-h... this will probably be the easiest. Or as an option, connect to the same server via ssh and forward the port. But all this (second paragraph) requires the intervention of your customer, but I think it's worth it.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question