Arch Linux

Exarch

Member

Registered: 2013-05-07

Posts: 5

Accessing a server via external vs internal ip

Hello everyone,
I'm sorry, this has almost certainly been asked before but I can't seem to find it. What is the main difference between accessing a server via an internal vs external address?

To give context, I'm planning on setting up a nfs server, always on, and I'd like to be able to access it from home and out and about. The external address would allow me to do that wherever i am, i should be able to just set that in the fstab and be ready to go, but I worry that the external address means that when i'm at home my traffic would be routed outside my home network and then relayed back in, which doesn't seem necessary, regardless of whether it changes access speeds.

Thanks!

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,355

Re: Accessing a server via external vs internal ip

I read that twice, and I think I understand, but let me ask for clarification.

By internal IP, you do not mean 127.0.0.1; rather you mean an address in a private address space (first octet of the IPv4 address is 192, 168 or 10)
By external IP, you mean a public Internet address that Harry Hacker can pound on.   I may be mistaken, but I think that the behavior depends on your router.  I use DD-WRT firmware on mine, and I am fairly sure that it is is aware of it's public address and handles routing in a rational manner.  At least, the activity LEDs seem to indicate it is so.  YMMV.  What type of router have you?

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
Sometimes it is the people no one can imagine anything of who do the things no one can imagine. -- Alan Turing
---
How to Ask Questions the Smart Way

tomk

Forum Fellow

From: Ireland

Registered: 2004-07-21

Posts: 9,839

Re: Accessing a server via external vs internal ip

I would handle this with a script that checks which network I am on, and then issues the appropriate mount command.

You didn't mention anything about security, so I'll just add that exposing NFS (or any network service) to the internet is a potential security risk, and appropriate measures should be taken.

Exarch

Member

Registered: 2013-05-07

Posts: 5

Re: Accessing a server via external vs internal ip

Thanks for the quick replies.
ewaller: yeah, private address space. I need to work on my terminology. And I'm not sure what router I'll be using, this will be after a move.

tomk: what is the best way to secure nfs through the internet? I've been keeping with sshfs for my current (remote) needs. Maybe use the sshfs for remote and nfs at home just to be on the safe side?