9:59:59.000,9:59:59.000
Hi everyone, welcome back

9:59:59.000,9:59:59.000
So today we're going to try something a little bit different

9:59:59.000,9:59:59.000
We're gonna start a new video series

9:59:59.000,9:59:59.000
about all the different ways to expose or access our homelab

9:59:59.000,9:59:59.000
from the internet

9:59:59.000,9:59:59.000
The reason is mainly because there's tons of options out there.

9:59:59.000,9:59:59.000
and i feel like it's not talked enough about on YouTube

9:59:59.000,9:59:59.000
Especially the security part

9:59:59.000,9:59:59.000
which is most important

9:59:59.000,9:59:59.000
almost everyone just assumes it's secure which isn't always the case

9:59:59.000,9:59:59.000
so make sure to hit the like button

9:59:59.000,9:59:59.000
subscribe

9:59:59.000,9:59:59.000
and let's get started

9:59:59.000,9:59:59.000
okay so how to do it

9:59:59.000,9:59:59.000
to expose our homelab there are five main ways

9:59:59.000,9:59:59.000
1. Secure Tunnels like Cloudflare

9:59:59.000,9:59:59.000
2. Reverse proxies like Nginx

9:59:59.000,9:59:59.000
3. Traditional VPNs like Wireguard or OpenVPN

9:59:59.000,9:59:59.000
4. Mesh VPNs like ZeroTrust and Tailscale

9:59:59.000,9:59:59.000
and lastly the old classic port forwarding or NAT

9:59:59.000,9:59:59.000
So let's break down each one of them quickly to understand the differences

9:59:59.000,9:59:59.000
first secure tunnels like Cloudflare

9:59:59.000,9:59:59.000
This is often defined as secure tunnels to access your app without exposing your IP address

9:59:59.000,9:59:59.000
making remote access easy

9:59:59.000,9:59:59.000
it's also fairly easy to setup

9:59:59.000,9:59:59.000
however, by default it's not secured enough

9:59:59.000,9:59:59.000
and solely reling on your app security

9:59:59.000,9:59:59.000
but this can be improved

9:59:59.000,9:59:59.000
we'll cover this later in another video

9:59:59.000,9:59:59.000
next reverse proxies

9:59:59.000,9:59:59.000
like nginx

9:59:59.000,9:59:59.000
it's a server that sits in the middle and forward requests to your homelab

9:59:59.000,9:59:59.000
helping you manage multiple services under one domain

9:59:59.000,9:59:59.000
while adding another layer of protection

9:59:59.000,9:59:59.000
you will have more control over your services

9:59:59.000,9:59:59.000
and how to manage them

9:59:59.000,9:59:59.000
however, it exposes your IP and you must open a port on your router to access it

9:59:59.000,9:59:59.000
next, traditional VPNs like Wireguard or OpenVPN

9:59:59.000,9:59:59.000
it created an encrypted tunnel between your device and

9:59:59.000,9:59:59.000
your home lab

9:59:59.000,9:59:59.000
making it feel like you are on the same local network

9:59:59.000,9:59:59.000
it's good for privacy and security

9:59:59.000,9:59:59.000
but only useful when you are the only user because

9:59:59.000,9:59:59.000
it's impossible to share access without sharing your private key

9:59:59.000,9:59:59.000
to other users

9:59:59.000,9:59:59.000
next, mesh VPNs

9:59:59.000,9:59:59.000
like ZeroTier or Tailscale

9:59:59.000,9:59:59.000
this is similar to normal VPns except it connects devices between each other

9:59:59.000,9:59:59.000
instead of connecting them to a central server

9:59:59.000,9:59:59.000
it has more control over normal VPNs in the way that you can choose which devices to share

9:59:59.000,9:59:59.000
but you must manually join the network

9:59:59.000,9:59:59.000
each time for each devices you want to give access to

9:59:59.000,9:59:59.000
finally NAT this is a classic way of opening specific ports on your router

9:59:59.000,9:59:59.000
to expose your homelab

9:59:59.000,9:59:59.000
it's simplicity also carries high security risk if you rely on it alone.

9:59:59.000,9:59:59.000
keep in mind NAT often gets used with other

9:59:59.000,9:59:59.000
methods like previously showed

9:59:59.000,9:59:59.000
but going purely [on it's own] port forwarding is a no-go for security setups

9:59:59.000,9:59:59.000
Now, you may be wondering,

9:59:59.000,9:59:59.000
What's the most secure setup?

9:59:59.000,9:59:59.000
to expose your home lab?

9:59:59.000,9:59:59.000
Actually,