selfhosted
/
selfhosted-apps-docker
mirror of https://github.com/DoTheEvo/selfhosted-apps-docker.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

update

This commit is contained in:
DoTheEvo 2023-01-14 10:45:33 +01:00
parent c39ebb3ecd
commit 1082d85bd1
1 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
opnsense/readme.md
View File

@ -107,14 +107,13 @@ checkboxes about NAT reflection, also called hairpin NAT or a NAT loopback.
- Automatic outbound NAT for Reflection: `Enabled`
*extra info:*<br>
Many consider NAT reflection a hack that should not be used or even allowed.<br>
That the correct way is split DNS, where you maintain DNS records so that
`a.example.com` points directly to some local 192.168.0.12 IP address.<br>
Reason being that since DNS records are cached, this way machines on LAN,
that use hostname to access each other, are not hitting the firewall with
every traffic that goes between two machines on LAN side.
But IMO in small scale selfhosted setup its perfectly fine and it requires
far less management.
Many consider NAT reflection to be a hack that should not be used.<br>
That the correct way is split DNS, where you maintain separate DNS records for
LAN side so that `a.example.com` points directly to some local ip.
Reason being machines on LAN that use FQDN to access other machine on LAN
are not hitting the firewall with every traffic that goes between them.
But IMO in small scale selfhosted setup its perfectly fine
and it requires far less management.
### Port Forwarding: