On separate machine Ive setup some www server based on Debian 8 for testing purposes. It has also samba and GIT server installed. Today we got public ip from our ISP and i redirected port :80 to our LAN machine server.
LAN SERVER [*.*.0.200:8010] <= INSIDE ROUTER [*.*.1.100] (:80 redirection to *.0.200:8010 ) <= OUTSIDE ROUTER(:80 redirection to *.*.1.100:80)
Our project already has some authorisation and login mechanisms applied but all is on very early state (pre alpha) so we affraid about security. But server need to be exposed for our boss (for progress tracking) and people which work in offices in another city (testers) who are the targets of this project.
So we tought about setup VPN tunnel for outside users to our LAN Server. Already read some articles like this one... https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-8
And now we (me, because i will have to configure it) are thinking about setup redirections this way
LAN SERVER [*.*.0.200:8010] <= VPN Server [*.*.1.210] (:80 redirection to *.0.200:8010 ) <= INSIDE ROUTER [*.*.1.100] (:80 redirection to *.0.210:80 ) <= OUTSIDE ROUTER(:80 redirection to *.*.1.100:80)
where VPN server will be either separate machine or virtual machine with its own IP set on LAN SERVER machine. All outside traffic will have to pass trough VPN but LAN users can directly access server by 0.200:8010 address.
What do you think about this idea?