Best way to secure the gateway

[vk3jap]

Just wondering what others have done for securing the gateway.. aside from just username and password?

I'm a big fan of two factor..say Google authenticator or similar...or, certificate based or..

Really not keen to port forward ports into a rPi on my trusted network (network isolation not an option at present).

[Jason]

Here is what I have done:

[Jason]

https://lowpowerlab.com/forum/pi-gateway/secure-remote-connections/

Long story short, the iot gateway keep connected to a proxy and you can connect to the proxy and access your device. No port forwarding required.

Is it really more secure than port forwarding? Probably in some aspects, but not in others.

[HeneryH]

I'm comfortable with port forwarding to an Nginx on Linux.