pikvm/docs/port_forwarding.md

Port forwarding

If the PiKVM located on a local network needs to be made accessible from the Internet, the easiest way to achieve this is a port forwarding on the router. In this case, an external (global) IP address must be assigned to the router. This service is provided by the ISP.

!!! tip If using an external IP address is not possible, it is recommended to try the Tailscale VPN.

• To configure port forwarding, refer to the documentation of the router.
• The Web UI listening ports 80 (HTTP) and 443 (HTTPS).
• By default port 80 performs permanent forwarding to 443 for security reasons.
• Forwarding the port 443 is sufficient.
• The VNC server runs on port 5900 (disabled by default).

!!! warning

* **[Set strong passwords and enable two-factor authorization](auth.md)
    before opening access to PiKVM from the Internet!**
* It is strongly recommended to obtain a valid HTTPS certificate, for example via [Let's Encrypt](letsencrypt.md).
* A good practice is using a custom port number instead of `443` from the Internet side, for example `14438` to avoid common port scanners.
* If you still decide to use the `443` port number, you may have to forward port `80` to get a redirect for your convenience.

Remember that port forwarding is a powerful and convenient tool, but security depends entirely on the user. In some cases, a VPN may be a more secure, but less convenient option (since it requires a VPN client on all devices that access PiKVM).