66
How much do you secure a home server that's only accessible with VPN? (programming.dev)
submitted 4 months ago by to c/selfhosted@lemmy.world
30 comments fedilink hide all child comments
 

I have a VPS that I secure as much as possible since the IP is public, but does a wireguard-access-only homelab warrant the same efforts? Those with homelabs like this, what do you do?

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 4 months ago* (1 child)

It is going to make fingerprinting more annoying while evading default port scans. That isnt nothing but you do you boo

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 4 months ago

    I agree that there is some value to obscurity generally, but Wireguard already evades port scans and fingerprinting. Unless a packet is signed with a known key, it gives no response to traffic, so scanners and fingerprinters see a closed port. You ISP can identify WG traffic while you are connected by inspecting your traffic, but random scanners won't see anything. Look on shodan, you won't see Wireguard.

  • permalink
  • fedilink
  • source
  • parent