# Access Node Red dashboard through carrier grade nat

**URL:** <https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624>\
**Category:** Dashboard\
**Tags:** security\
**Created:** [16 April 2023 10:53 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624 "2023-04-16T10:53:36Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ant422](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@Ant422](https://discourse.nodered.org/u/Ant422)\
**Post date:** [16 April 2023 10:53 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/1 "2023-04-16T10:53:36Z")

</div>

Hi,

I know this is not specific to Dashboard but just wondering if anyone has any suggestions.  
In my current setup I have a fixed line (copper wire) broadband connection. I can forward ports through this easily. I have a Raspberry Pi running Wireguard inside my network so I connect to this when I need to access Node Red Dashboard. Dashboard controls my lights, water heat, central heating and some alarms so it's very useful to access it remotely.

I want to switch to a 5g internet service because my fixed line is only 10Mb. The problem is that the 5g router works on carrier grade nat so (if I'm correct) the public IP is shared with many people. This means I cannot port forward.

Does anyone have any suggestions how I could remotely access dashboard?

Many thanks  
A.

---

<div class="post-metadata">

**Author:** ![Colin](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/colin/32/17040_2.png) [@Colin](https://discourse.nodered.org/u/Colin)\
**Post date:** [16 April 2023 11:27 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/2 "2023-04-16T11:27:39Z")

</div>

See this FAQ post for advice on how to safely access node-red over the internet.

> [@Safely accessing Node-RED over the Internet](https://discourse.nodered.org/t/safely-accessing-node-red-over-the-internet/45024):
>
> Update 2025-02-19 The best advice for most people doing home automation is still: Don't expose Node-RED to the outside world! Where you really have to have some outside access, keep it as hands-off and restricted as possible. For example, using a Telegram bot. Also keep it as minimal as possible, e.g. Don't expose the Editor - EVER! If you want to provide remote control of your heating or the precious plants in your greenhouse, provide explicit controls with strong limits. Don't expose ever…

---

<div class="post-metadata">

**Author:** ![Ant422](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@Ant422](https://discourse.nodered.org/u/Ant422)\
**Post date:** [16 April 2023 11:52 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/3 "2023-04-16T11:52:14Z")

</div>

Thanks Colin. There is a lot of great info in there.  
I think Clouldflare might be worth looking into.

Thanks agian.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [16 April 2023 11:53 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/4 "2023-04-16T11:53:13Z")

</div>

> [@Ant422](#):
>
> Does anyone have any suggestions how I could remotely access dashboard?

Try out the free tier of Cloudflare Zero Trust. This gives you a relatively simple proxy that includes up to 50 user accounts and will connect via a small service running inside your network - the Pi will be fine. You can proxy any service including web services but also SSH - giving a web-based or direct connect terminal if you so wish. It is secure and performs well. A little trickier to set up initially than some of the other services but it is enterprise-grade with great security.

---

<div class="post-metadata">

**Author:** ![jbudd](https://avatars.discourse-cdn.com/v4/letter/j/5f8ce5/32.png) [@jbudd](https://discourse.nodered.org/u/jbudd)\
**Post date:** [16 April 2023 12:14 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/5 "2023-04-16T12:14:10Z")

</div>

When I switched from ADSL to mobile broadband I had to abandon wireguard. Instead I use Zerotier.

You create a virtual network on their website, install zerotier-one on the pi and any devices you want to connect from.

They reach out to zerotier so no port forwarding or ddns necessary.

You have to permit each device (once) on the web site, then they get a virtual IP.  
So my node-red pi is 192.168.1.11 but I can access it securely from the coffee shop at 192.168.192.11

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [16 April 2023 12:20 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/6 "2023-04-16T12:20:37Z")

</div>

Zerotier is similar to Clouldflare Zero Trust at least in terms of what is being looked for here. However, Zero Trust can provide things like a web-based remote console. Not sure if Zerotier can do that.

Either should be fine.

---

<div class="post-metadata">

**Author:** ![Ant422](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@Ant422](https://discourse.nodered.org/u/Ant422)\
**Post date:** [16 April 2023 18:16 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/7 "2023-04-16T18:16:16Z")

</div>

Brilliant, thank you all for the advice, this is exactly what I was looking for.

@TotallyInformation Thank you for taking the time to do the write up on the various connection options. Very helpful info.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [16 May 2023 18:16 UTC](https://discourse.nodered.org/t/access-node-red-dashboard-through-carrier-grade-nat/77624/8 "2023-05-16T18:16:56Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.