# Node Red GUI Behind a VPN but allow inbound call in outside of VPN

**URL:** https://discourse.nodered.org/t/node-red-gui-behind-a-vpn-but-allow-inbound-call-in-outside-of-vpn/51729
**Category:** General
**Created:** [30 September 2021 19:07 UTC](https://discourse.nodered.org/t/node-red-gui-behind-a-vpn-but-allow-inbound-call-in-outside-of-vpn/51729 "2021-09-30T19:07:31Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![HarryPottar](https://avatars.discourse-cdn.com/v4/letter/h/bb73d2/32.png) [@HarryPottar](https://discourse.nodered.org/u/HarryPottar)
#### Post date: [30 September 2021 19:07 UTC](https://discourse.nodered.org/t/node-red-gui-behind-a-vpn-but-allow-inbound-call-in-outside-of-vpn/51729/1 "2021-09-30T19:07:31Z")

</div>

HI,

Is there two separate ports node red runs on? one for inbound traffic and one for GUI?

We have node red deployed in the cloud. We changed the default port in the settings file and running https, secured behind authentication.

Ideally I want to lock the GUI behind a VPN so you have to be on our VPN for the administration. However I still need things like webhook subscription from outside services to be able to access the flows to process incoming data.

Is that even possible?  
thanks in advance  
Harry

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [30 September 2021 19:17 UTC](https://discourse.nodered.org/t/node-red-gui-behind-a-vpn-but-allow-inbound-call-in-outside-of-vpn/51729/2 "2021-09-30T19:17:20Z")

</div>

> [@HarryPottar](#):
>
> Is there two separate ports node red runs on? one for inbound traffic and one for GUI?

No. But they do use different paths so if you really wanted to, you might be able to use a reverse proxy to split the paths onto separate ports.

> [@HarryPottar](#):
>
> Is that even possible?

Yes, it should be - but you will need the help of NGINX, Caddy, HAproxy or something similar. You would use one of them to block access to the editor except from specific IP addresses.

---

<div class="post-metadata">

### Author: ![HarryPottar](https://avatars.discourse-cdn.com/v4/letter/h/bb73d2/32.png) [@HarryPottar](https://discourse.nodered.org/u/HarryPottar)
#### Post date: [30 September 2021 19:39 UTC](https://discourse.nodered.org/t/node-red-gui-behind-a-vpn-but-allow-inbound-call-in-outside-of-vpn/51729/3 "2021-09-30T19:39:24Z")

</div>

Thank you, started a dialogue with our infrastructure team, they are deploying in kubernetes cluster, but they have no node-red experience.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [29 November 2021 19:40 UTC](https://discourse.nodered.org/t/node-red-gui-behind-a-vpn-but-allow-inbound-call-in-outside-of-vpn/51729/4 "2021-11-29T19:40:03Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
