How to securely access an SSH server without a static IP address?

[myrcy]

Hello everyone,
I hope this is an alright spot to post this.
However, I recently set up a home server machine and I cannot seem to figure out how to properly utilize the SSH server without a static IP.

Does anyone have any utilitarian solutions to this problem?
Thank you so much in advanced.

[OpojOJirYAlG]

Dynamic DNS.

[FranklyFlawless]

@myrcy

Does anyone have any utilitarian solutions to this problem?

Automated hourly script to update pointers:

@tracy

My 34 year old HP3000 is in my garage. Since I have residential provider, my IP address has a tendency to change with the weather. Like every neighborhood power failure or ISP update. To tie it down takes a business account.

In any case my machine runs a job (a.k.a. cron in linux but this ain’t linux) that runs at the top of the hour every hour, it makes sure my machine’s internet domain is tied to the current IP of my house.

[irvinewade]

@myrcy

without a static IP

Would be helpful to know how often the IP address actually changes.

There are two problems here:

1. How to be secure?
2. How to find the server in the first place?

The first reply somewhat addresses the second question.

The first question would involve being very careful to cache and check the fingerprint on any client computer.

Given your setup, you may also have to contend with NAT.

[thejackimonster]

My recommendation is setting up a wireguard VPN in your local network, expose that through NAT via non-default port, setup dynamic DNS to access the VPN and once connected you can securely SSH into your server. I still recommend using SSH via public key authentication only though, just to be safe.

[pajuky]

This is the way:

• do not expose SSH to your public IP, only allow it over the local network + Wireguard network
• use Wireguard (OK to expose port on public IP) + DynamicDNS