←back to thread

Knocker, a knock based access control system for your homelab

(github.com)
67 points xlmnxp | 1 comments | 22 Oct 25 08:37 UTC | HN request time: 0.226s | source
Show context
abujazar ◴[22 Oct 25 10:02 UTC] No.45666911[source]▶
Nowadays public facing client IPs are often shared by thousands of users behind CGNAT. IP based firewall rules are useful when the peers have their own static IP address, but provide no real security when the IP address is shared.

This is vibe coded security through obscurity, i. e. quite useless. Use Tailscale or a self hosted VPN.

replies(1): >>45667308 #
1. nextlevelwizard ◴[22 Oct 25 11:00 UTC] No.45667308[source]▶
It could be fun extra layer. Like of course you should always use VPN, but maybe a magic packet so your VPN server even opens a port could be fun.