diff --git a/docs/port_forwarding.md b/docs/port_forwarding.md index a1db2318..a5bb8481 100644 --- a/docs/port_forwarding.md +++ b/docs/port_forwarding.md @@ -1,16 +1,23 @@ # Port forwarding -If your ISP has provided you with an external IP address for the router, you can configure port forwarding to access PiKVM. +If the PiKVM located on a local network needs to be made accessible from the Internet, +the easiest way to achieve this is a port forwarding on the router. +In this case, an external (global) IP address must be assigned to the router. +This service is provided by the ISP. + +!!! note + If using an external IP address is not possible, it is recommended to try + the [Tailscale VPN](tailscale.md). + +* To configure port forwarding, refer to the documentation of the router. +* The Web UI listening ports `80` (HTTP) and `443` (HTTPS). +* By default port `80` performs permanent forwarding to `443` for security reasons. +* Forwarding the port `443` is sufficient. +* The [VNC](vnc.md) server runs on port `5900` (disabled by default). !!! warning * **[Change passwords](first_steps.md#getting-access-to-pikvm) before opening access to PiKVM from the outside Internet.** - * It's also a good practice to use only HTTPS (port 443) with a valid certificate (like [Let's Encrypt](letsencrypt.md)). - * Additionally, you can use a custom external port number instead of 443, for example 14438 to avoid common port scanners. - -* The Web UI runs on port `80` and `443`. -* [VNC](vnc.md) (if you use it) runs on port `5900`. - -If you don't have an external IP address, then we recommend trying [Tailscale VPN](tailscale.md). - -!!! note You may have to forward both the `http` and `https` ports (`80` and `443` here) in order to access the Web UI via `http`. + * It's also a good practice to use only HTTPS with a valid SSL certificate (like [Let's Encrypt](letsencrypt.md)). + and using a custom port number instead of `443` from the Internet side, for example `14438` to avoid common port scanners. + * If you still decide to use the `443` port number, you may have to forward port `80` to get a redirect for your convenience.