Host Fog Over the Internet

[zfeng]

Hi guys, just want to know how you guys host Fog server over the Internet. How do you guys block the IP addresses to access the fog server with the port, also what port that the Fog server uses by default? I want to make sure that I can securely set up the fog server to connect to the Internet. thx

[Sebastian Roth]

@zfeng We don’t suggest to setup FOG facing the internet because it was not build with that intended and uses a fair amount of old school protocols. That said you can dive into manual configuration and make it more secure. But that’s you own business.

On the other hand I might raise the question why you would want to do that? PXE booting clients over the internet is not going to work. If it’s just for the sake of using the web UI over the internet I would still set it up on an internal machine and either use port forwards or even better setup a proper VPN to connect to from the outside world and then use the FOG web UI.

[zfeng]

Thanks for your reply. I try to set up a fog server on the Network that be accessed from the outside. So that is why I want to see what default port fog uses so I can block that port from any outside access to fog server

[Wayne Workman]

@zfeng If you’re only wanting to use the web interface over the internet, you should certainly setup your FOG server to use https. And after that, you only need to allow ingress 443. Still, I’d suggest not doing this. Better to use VPN.

On your internal network, FOG needs a lot of ports. this is all detailed in the wiki.
https://wiki.fogproject.org/wiki/index.php?title=FOG_security

[zfeng]

This post is deleted!

[zfeng]

@wayne-workman thanks for your info