Twingate Setup with dedicated Server and Docker environment: Beginner
Questions
reddit / selfhosted

----------------------------------------------------------------------
Kandusha · 2023-12-25 12:44

Hey guys,

I'm pretty much a beginner and need some input from you guys!

I have a dedicated server running with some docker services that want
to use just like on a local network. For that, I don't want them to be
exposed to the Internet to minimize attack surfaces.

I have a Twingate connector running in a docker Container and can
access my services over let's say:

[~~https~~://172.17.0.3](https://172.17.0.3):port

I use Portainer to manage my docker containers and the networks.

When I scan my server IP for open ports, I only get 22/tcp.

But I still don't trust this outcome!

Questions:

Is it problematic to access the services “locally” without SSL?
Is there anything I should consider, regarding the docker network? All
networks have a gateway to the Host (172.17.0.)

Maybe I sound stupid, but anyway, these are the things in question for
me :D

Thanks for any Help

​

----------------------------------------------------------------------
hereisjames · 2023-12-25 23:10

I'm not very clear what you're asking.

The Twingate connectors operate by making outbound connections to a
central management server, so they don't need any inbound ports open.
This is very secure as long as your credentials on the controller
aren't compromised.

A Docker host runs one or more Docker networks. These are private
networks within the host that allow the connected containers to
exchange data. Again, this is not visible from outside the Docker host
unless you map ports from the containers to be reachable.

So technically you could run a Twingate container which gives you
access to all the Docker containers on a host without having to open
any inbound ports at all, because it makes outbound connections only
and the other containers talk to each other using the host's private
Docker network.

----------------------------------------------------------------------
Kandusha · 2023-12-26 06:16

This answered already my question about the networking it self, thank
you!!