Guide contents5 of 9
SSH, RDP and databases
TCP services, private with a local port or public with an IP list.
Open the range on the server
/etc/lnkstart/server.toml
[tcp] ports = "40000-40099"
That range must also be open on the VPS firewall. Each TCP service gets a port and keeps it as long as it exists.
Private: recommended
No public port. Anyone who wants to enter opens a port on their own machine with lnkstart connect, and that tunnel only works with their credential.
On the home or office machine
lnkstart add rdp=3389 --tcp --private lnkstart add ssh=22 --tcp --private
On the machine you are connecting from
lnkstart connect rdp --port 3389 lnkstart connect ssh --port 2222
Next: RDP client to 127.0.0.1:3389, or ssh -p 2222 user@127.0.0.1.
On the VPS
sudo lnkstart server join-code rdp-client --connect-only --names rdp
A credential that only works to connect to that service, and cannot publish anything.
Public, with IP list
On the machine that publishes it
lnkstart add db=5432 --tcp --allow 203.0.113.7/32 lnkstart add mqtt=1883 --tcp --open
--open leaves the port open to the whole internet. SSH or RDP open get login attempts within minutes: use --private or --allow unless you know what you are doing.
A TCP service is not served over HTTP: its web address returns 404 on purpose. You see it with sudo lnkstart server services list, which shows tcp://tunnels.midominio.com:port.