pikvm/docs/port_forwarding.md

Port forwarding

If you need to make PiKVM accessible from Internet, the easiest way to achieve this is by forwarding a port on the router. In this case, an external (global) IP address must be assigned to the router. This service is provided by the ISP.

!!! tip If using an external IP address is not possible, it is recommended to try the Tailscale VPN.

• To configure port forwarding, refer to the documentation of the router.
• The Web UI listening ports are 80 (HTTP) and 443 (HTTPS).
• By default, port 80 performs permanent forwarding to 443 for security reasons.
• Forwarding the port 443 is sufficient in most cases.
• If enabled, the VNC server runs on port 5900 (disabled by default).

!!! warning

* **[Set strong passwords and enable two-factor authorization](auth.md)
    before opening access to PiKVM from the Internet!**
* It is strongly recommended to obtain a valid HTTPS certificate, for example via [Let's Encrypt](letsencrypt.md).
* A good practice is using a custom port number instead of `443` from the Internet side, for example `14438`, to avoid common port scanners.
* If you still decide to use the `443` port number, you may want to forward port `80` to get a convenient redirect.

Port forwarding is a powerful and convenient tool, but remember that security depends entirely on your configuration. In most cases, a VPN is a more secure, but less convenient option (since it requires a VPN client on all devices that access PiKVM).