The Old Way

Port Forwarding

  • Must open inbound ports on your router (80, 443, SSH...)
  • Every open port is a potential attack surface
  • IP can be scanned, DDoS'd, or brute-forced directly
  • IP changes when your ISP feels like it — DNS breaks
  • No protection layer between attacker and your machine