Node-Red in EC2-Amazon Linux accessed by https

General
1

Hi Dears,

I have a node-red application running with http on an EC2-Amazon Linux server. I would like to be able to access it using https. From what I've read, I'll have to put a certificate on EC2 and change the settings.js configuration. Does anyone know detailed material that wants me to do this?

Best regards,

Roberto

2

Hi, a warning. If you have allowed http access without TLS over the Internet to the Node-RED editor, there is a strong possibility that it is compromised.

Please ready the security FAQ's on this site.

3

Personally I use Cloudflare Zero Trust which will do all that for you.

2 Likes
4

Agreed. Just make sure that there is no direct route to anything you want protected.

But bearing in mind my warning, you may need to rebuild anyway to be safe.

5

I tested this feature to take control of a client desktop with node-red. I thought it was excellent. But I hadn't thought about using it in my node-red in Aws. I will look into this option.

Do you use the free acount?

6

I use the free account (up to 50 users). But if using for commercial work, check the terms and conditions in case that is excluded.

Taking over a client desktop is a very sensitive task and absolutely requires significant security and privacy understanding. It may also need careful contracts and written safeguards in place if you want to avoid ending up in legal issues.

1 Like