web server Setting up a Public Facing Web Server

[JamieS56]

Hi All,

 

I was wondering the best way to set up a public facing web server on my network (or possibly a seperate network).

 

I want to know:

• What the safest way to do this is on both my existing network and a seperate network where there still may be stuff I don't want public facing,
• What equipment I may need to do this and
• Any other things I should be thinking about

 

All I want to host is a node server displaying a html page and a small data base.

 

Thanks

 

[Electronics Wizardy]

Well you should be able to do it with any computer that can host a web site and a internet connection that allows opening ports.

 

Now a lot of the security stuff relly depends on the rest of your setup. The public internet can only access the web server, but the risk is the web server is broken into and a gateway to other stuff on your network. Id argue this isn't a huge risk for a I want to mess with websites at home, but to prevent this you can setup a router so the device hosting the website can't access any other devices on the network.

 

You can also get a cheap vps, then there is no risk to your home network.

[JamieS56]

6 minutes ago, Electronics Wizardy said:

Well you should be able to do it with any computer that can host a web site and a internet connection that allows opening ports.

 

Now a lot of the security stuff relly depends on the rest of your setup. The public internet can only access the web server, but the risk is the web server is broken into and a gateway to other stuff on your network. Id argue this isn't a huge risk for a I want to mess with websites at home, but to prevent this you can setup a router so the device hosting the website can't access any other devices on the network.

 

You can also get a cheap vps, then there is no risk to your home network.

I did have my router port forwading any traffic to my web server going over that port but wasn't sure how safe that was and weather it should be on a dedicated machine or if it's fine on one of my computers. But I read I may need to create a quarantine zone or propperly configured firewall for the web server and/ or my home network. Are these things required, best practice or completley un-needed?

[Electronics Wizardy]

3 minutes ago, JamieS56 said:

I did have my router port forwading any traffic to my web server going over that port but wasn't sure how safe that was and weather it should be on a dedicated machine or if it's fine on one of my computers. But I read I may need to create a quarantine zone or propperly configured firewall for the web server and/ or my home network. Are these things required, best practice or completley un-needed?

For just messing around at home your probably fine just port fordwarding your pc. Just make sure to keep things up to date and you will keep the bots out. Most attackers won't put much effort into getting in a home network as there isn't much to gain.

 

Its best practice to have it fully isolated so if the web server is compromised noting else on the network can be gotten into, but this is much more of a concern in a buiness.

 

Id say your probably fine hosting on your pc if your folling security best practices(updates, non default passwords). But also your hosting on a home internet connection, so thats not great for hosting anyways.

[Biohazard777]

38 minutes ago, JamieS56 said:

All I want to host is a node server displaying a html page and a small data base.

Rent a cheap VPS, something like this:

https://cloudserver.net/billing/index.php?rp=/store/custom-packages/leb-1gb-annual-plan

Seriously, for less than 1$ a month it isn't worth it to waste time on setting up things at your home... heck you might even save some $ by not paying for electricity.

 

12 minutes ago, JamieS56 said:

best practice

This is THE best practice, don't self-host unless you have to.

[JamieS56]

3 minutes ago, Biohazard777 said:

Rent a cheap VPS, something like this:

https://cloudserver.net/billing/index.php?rp=/store/custom-packages/leb-1gb-annual-plan

Seriously, for less than 1$ a month it isn't worth it to waste time on setting up things at your home... heck you might even save some $ by not paying for electricity.

 

This is THE best practice, don't self-host unless you have to.

Thanks for the reply! Part of why I want to do this is to learn how to configure my own network and have complete controll over it. But yes I agree having it hosted in the cloud is deffinetley safest to protect my home network.