If you need to make PiKVM accessible from Internet, the easiest way to achieve this is by forwarding a port on the router. In this case, an external (global) IP address must be assigned to the router. This service is provided by the ISP.
If using an external IP address is not possible, it is recommended to try the Tailscale VPN.
- To configure port forwarding, refer to the documentation of the router.
- The Web UI listening ports are
- By default, port
80performs permanent forwarding to
443for security reasons.
- Forwarding the port
443is sufficient in most cases.
- If enabled, the VNC server runs on port
5900(disabled by default).
- Set strong passwords and enable two-factor authorization before opening access to PiKVM from the Internet!
- It is strongly recommended to obtain a valid HTTPS certificate, for example via Let's Encrypt.
- A good practice is using a custom port number instead of
443from the Internet side, for example
14438, to avoid common port scanners.
- If you still decide to use the
443port number, you may want to forward port
80to get a convenient redirect.
Port forwarding is a powerful and convenient tool, but remember that security depends entirely on your configuration. In most cases, a VPN is a more secure, but less convenient option (since it requires a VPN client on all devices that access PiKVM).