Styjun

Good way to stop electrolyte tabs from turning into powder?

Weird resistor with dots around it on the schematic

How to gracefully leave a company you helped start?

A+ rating still unsecure by Google Chrome's opinion

Can anyone help me what's wrong here as i can prove 0 = 1?

How can I find an old paper when the usual methods fail?

How do I ask for 2-3 days per week remote work in a job interview?

What allows us to use imaginary numbers?

How to prevent criminal gangs from making/buying guns?

If a person claims to know anything could it be disproven by saying 'prove that we are not in a simulation'?

Setting up a Mathematical Institute of Refereeing?

Physical Interpretation of an Overdamped Pendulum

Why does "auf der Strecke bleiben" mean "to fall by the wayside"?

How does the Moon's gravity affect Earth's oceans despite Earth's stronger gravitational pull?

Output the list of musical notes

Is there a word for returning to unpreparedness?

Why does Japan use the same type of AC power outlet as the US?

Do I need to start off my book by describing the character's "normal world"?

Why do so many people play out of turn on the last lead?

Is there a fallacy about "appeal to 'big words'"?

Duplicate and slide edge (rip from boundary)

Will some rockets really collapse under their own weight?

Does an Irish VISA WARNING count as "refused entry at the border of any country other than the UK?"

What modifiers are added to the attack and damage rolls of this unique longbow from Waterdeep: Dragon Heist?

Keep ports open permanently for Traefik?

How can you find out which process is listening on a port on Windows?What is the difference between a port and a socket?scp with port number specifiedInternal and external services running behind Traefik in Docker Swarm modeProperly Setting up Traefik HTTPStraefik failed external connectivity - 443 already in useHow to do redirection with traefik for custom docker portsTraefik/Docker: Using ports as a frontend rule (rather than paths or subdomains)Does Traefik take care of the initial “Let's encrypt” authentication and renewal?Exclude domains from Traefik Let's Encrypt

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

0

I've been using Traefik for quite a while to route different domains and subdomains to different Docker containers on a server, but wondered about the security implications (or not) of ports 443 and 80 being open on my router all the time.

Am I correct in thinking that 443 needs to be open in order for my domains to work over https, and that I need to permanently leave that port open?
If so, would changing the external port make it 'more secure'? (i.e. use some random external port and forward it to the internal port 443) E.g. 28473 external port forwarded to 443 internally?

Also, do I need to leave port 80 open on my router all the time? Isn't that used just for Let's Encrypt to create/issue/renew certificates? If so would it work to only open that port 'now and then' to renew the certificates?
Or like my previous question, would it be better to open some random external port and forward that to the internal port 80?

Would that improve security, or am I wrong in thinking that? :)

port traefik

share|improve this question

asked Mar 27 at 12:24

Jono HuntJono Hunt

1344 bronze badges

add a comment | 

0

I've been using Traefik for quite a while to route different domains and subdomains to different Docker containers on a server, but wondered about the security implications (or not) of ports 443 and 80 being open on my router all the time.

Am I correct in thinking that 443 needs to be open in order for my domains to work over https, and that I need to permanently leave that port open?
If so, would changing the external port make it 'more secure'? (i.e. use some random external port and forward it to the internal port 443) E.g. 28473 external port forwarded to 443 internally?

Also, do I need to leave port 80 open on my router all the time? Isn't that used just for Let's Encrypt to create/issue/renew certificates? If so would it work to only open that port 'now and then' to renew the certificates?
Or like my previous question, would it be better to open some random external port and forward that to the internal port 80?

Would that improve security, or am I wrong in thinking that? :)

port traefik

share|improve this question

asked Mar 27 at 12:24

Jono HuntJono Hunt

1344 bronze badges

add a comment | 

I've been using Traefik for quite a while to route different domains and subdomains to different Docker containers on a server, but wondered about the security implications (or not) of ports 443 and 80 being open on my router all the time.

Am I correct in thinking that 443 needs to be open in order for my domains to work over https, and that I need to permanently leave that port open?
If so, would changing the external port make it 'more secure'? (i.e. use some random external port and forward it to the internal port 443) E.g. 28473 external port forwarded to 443 internally?

Also, do I need to leave port 80 open on my router all the time? Isn't that used just for Let's Encrypt to create/issue/renew certificates? If so would it work to only open that port 'now and then' to renew the certificates?
Or like my previous question, would it be better to open some random external port and forward that to the internal port 80?

Would that improve security, or am I wrong in thinking that? :)

port traefik

share|improve this question

asked Mar 27 at 12:24

Jono HuntJono Hunt

1344 bronze badges

share|improve this question

asked Mar 27 at 12:24

Jono HuntJono Hunt

1344 bronze badges

share|improve this question

asked Mar 27 at 12:24

Jono HuntJono Hunt

1344 bronze badges

asked Mar 27 at 12:24

Jono HuntJono Hunt

1344 bronze badges

asked Mar 27 at 12:24

Jono HuntJono Hunt

1344 bronze badges