frigginglorious has quit [Ping timeout: 268 seconds]
<kentonv>
indeed, we're excited to finally take your moneys. :)
jadewang has quit [Remote host closed the connection]
frigginglorious has joined #sandstorm
frigginglorious has quit [Quit: frigginglorious]
frigginglorious has joined #sandstorm
jadewang has joined #sandstorm
KooBaa has joined #sandstorm
KooBaa has quit [Ping timeout: 256 seconds]
frigginglorious has quit [Quit: frigginglorious]
mooost has joined #sandstorm
<mooost>
I setup a sandstorm server behind an office network. So sandcats dns is resolving ip correctly but requests don't reach sandstorm. I'd like to setup a cloud VPS with a static IP to act as a reverse proxy between sandstorm and the internet. What's the best tool for this? I'm not sure if a VPN is needed, or something else.
<kentonv>
mooost, do you actually want Sandstorm to be internet-accessible, or are you only doing this because Sandcats requires it?
<mooost>
I want it to be internet accessible.
<kentonv>
would it make sense to host Sandstorm itself on the VPS? Otherwise it seems like your requests when you are in the office will still bounce through the remote server and then back to the office, which seems kind of odd. But OTOH having the data physically in your possession is nice too.
<kentonv>
otherwise, yeah, if you can't open the ports on your office firewall then I suppose you will need a VPN.
<mooost>
Ya, its a physical possession thing and just playing around.
<kentonv>
well it's pretty unusual to VPN a server like this. :)
<kentonv>
to be honest I don't know much about this topic
<isd>
mooost: I'd set up openvpn (which is not too bad). From there, you'll have a nic that appears to be on a subnet with your vps server, and you can just use nginx to proxy, or for that matter just forward the ports
<isd>
How restrictive is the office firewall? do you have restrictions on outbound connections?
<mooost>
This is the first problem I've had with it so I don't think its that restrictive.
<isd>
Ok. then probably fine to just set up an openvpn server and connect to it from the machine behind the firewall
<mooost>
There's also some hacks like a network extender in between the sandstorm and the office router which could be complicating normal operation.
<mooost>
I use a VPN normally so that should work.
<mooost>
After Sandstorm machine is connected to VPN, is there any other config that needs to happen on that side? Or only on the VPS?
<kentonv>
I think at that point it's a matter of setting up nginx on the VPS
<isd>
I don't think the sandstorm server will need any more tweaking than that -- the VPS just needs to forward traffic to it.
<kentonv>
which is described in the docs I think
<kentonv>
oh actually for sandcats you probably don't want nginx... you probably just want to forward ports
<kentonv>
so I guess you set up the VPS like a NAT router?
<isd>
that had been my thinking
<mooost>
Ya that makes sense. I need to do some more research, but that helps a log.