Update 2025-02-19 The best advice for most people doing home automation is still: Don't expose Node-RED to the outside world! Where you really have to have some outside access, keep it as hands-off and restricted as possible. For example, using a Telegram bot. Also keep it as minimal as possible…

So, been a very hectic year for me so not really had a chance to come back to this subject. But after a fruitful conversation with Bart, I wanted to at least jot down some notes about securing Node-RED. To make Node-RED endpoints available over the Internet, there are 3 components we need to think…

Following another set of compromised Node-RED servers that were open to the Internet , I realised that there might be some useful advice missing from the above. There is an additonal level of security that you can apply and indeed, really should, if you need to expose a Node-RED service endpoint (e.…

Install node red on any platform as usual, then install remoteit client and add TCP service to client. Connect node red via remoteit dashboard.

Recently I came across another solution, which is free, secure and solid: Cloudflare zero trust tunnels (you do need a creditcard to register and a domain name). The end result is that you can keep all ports closed on your router and run a cloudflare daemon (or docker container - how it runs here) t…

Yes, been using that for a while now. It is more complex to set up than some of the other tools but it is flexible and secure. And you get 50 user accounts even on the free tier which is amazing. Interestingly, Microsoft have also done a deal with Cloudflare to build a "VPN Lite" feature into Micro…

[image] sdrshnptl: Install node red on any platform as usual, then install remoteit client and add TCP service to client. Connect node red via remoteit dashboard. Please edit your answer and add this sentence: - only Free when: max 1 user & Personal usage ! Took me +5 minutes unnecessaril…

You may add enhancement to the list: [image] Getting Started - Caddy Documentation Caddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go A strong Proxy, which can handle certificate renewal by itself protects the …

As for self-managed VPN, I've found this: https://www.softether.org/ Free, FOSS on all platforms can be installed and everything can connect etc. What I like is the very easy GUI management of it and the huge, easy to understand networking manual to it.

[image] issambfs1: you need to pay for the fix ip Can you not use a free domain name provider such as duckdns?

Node-RED

Node-RED Forum

Safely accessing Node-RED over the Internet

FAQs

issambfs1 14 March 2023 15:28 12

The problem of vpn is you need i fix ip address that mean you need to pay for the fix ip !

Topic		Replies	Views
Securing Node-Red General security	33	8558	24 December 2023
Configuring Public Node-RED Server on RPi General	29	1735	23 July 2020
Node-red-contrib-letsencrypt General security	34	907	23 August 2024
Ideas for a simple setup of a free tier General security	52	1372	9 January 2024
Dashboard suddenly asks for password (Hacked Node-RED servers) General security	128	4277	4 December 2022

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Safely accessing Node-RED over the Internet

Related topics