Network security and remote access options

@klogg wrote:

I would appreciate some thoughts / advice…

I would like access to my HA from outside my network and as far as I see it I have main four options:

1. ZeroTierOne
   I currently use ZeroTierOne but my phone often drops the VPN connection so I have to reconnect. I also have suspicions that it was adversely affecting my phone battery life.

2. A self hosted VPN provided by my UniFi USG, using DuckDNS
   Similarly Android does not allow an always-on VPN unless it is to an actual numeric IP address so I am again always having to reconnect. My ISP does however allow me to pay a negligible one time fee for a fixed IP so that is an option.

3. Vanilla DuckDNS and an open port on my router
   Call me paranoid but I’m not all that keen on opening a port on my router unless someone here can convince me that it is safe to do so

4. And of course Nabu Casa
   I don’t wish to use Nabu Casa for remote connection for the same reasons I don’t want to rely on any cloud services unless absolutely necessary.

There are other options of course but they seem to me to be either very technical or commercially paid-for (e.g. VPN subscription)

A fixed IP address and UniFi VPN seems to me the way I should go but is there any technical or security downside to getting my IP fixed and using the UniFi VPN?

Is there anything else I need to think about?

Thanks for any feedback and hopefully it might be useful to others too.

Posts: 1

Participants: 1

Read full topic