How to make a staging server inaccessible to rest of the world?

Unanswered

Dwarf Crocodile posted this in #help-forum

Dwarf CrocodileOP

2025-01-29T10:49:22.866Z

I have 2 git branches: prod and dev(staging)
Running both of them on separate ec2.

How can I make that dev ec2 inaccessible to others?
and is this common to make dev-servers inaccessible?

4 Replies

Dwarf CrocodileOP

2025-01-29T10:56:54.698Z

and my team members might not have fixed set of IP addresses.

Dwarf Crocodile

2025-01-31T08:42:35.289Z

is this common to make dev-servers inaccessible?

Yes, definitely recommended, because usually dev servers have lower security standards than production, which could lead to severe problems

and my team members might not have fixed set of IP addresses.

Well that's where it gets complicated, this system usually relies on a IP whitelisting
You can get fixed IP for cheap, here with my team we bought 1 NordVPN account with dedicated IP and are all using it. You could also spawn a VPN server (like Wireguard or OpenVPN) within your AWS instance and use it
Then it's all about playing with the security group or WAF of your dev ec2 to only allow this IP

@Dwarf Crocodile > is this common to make dev-servers inaccessible? Yes, definitely recommended, because usually dev servers have lower security standards than production, which could lead to severe problems > and my team members might not have fixed set of IP addresses. Well that's where it gets complicated, this system usually relies on a IP whitelisting You can get fixed IP for cheap, here with my team we bought 1 NordVPN account with dedicated IP and are all using it. You could also spawn a VPN server (like Wireguard or OpenVPN) within your AWS instance and use it Then it's all about playing with the security group or WAF of your dev ec2 to only allow this IP

Dwarf CrocodileOP

2025-02-03T04:58:43.889Z

cool

i was thinking to add a basic auth directly to my web server (nginx) using apache htpasswd utility