Live data from Hacker News

Pgrok – Poor Man’s Ngrok

github.com

1–10 of 83 posts

Re: Pgrok – Poor Man’s Ngrok

#6
> This is intended for small teams that need to expose the local development environment to the public internet

As someone who has to manage enterprise firewalls, this is a nightmare from a security perspective. I’m more than happy to host some project in a DMZ. I have already had some devs skirt our security policies with ngrok rather than simply talk to us about their needs. I can’t say I’m a fan of punching permanent holes into a firewall like this.

Re: Pgrok – Poor Man’s Ngrok

#7

> This is intended for small teams that need to expose the local development environment to the public internet As someone who has to manage enterprise firewalls, this is a nightmare from a security perspective. I’m more than happy to host some project in a DMZ. I have already had some devs skirt our security policies with ngrok rather than simply talk to us about their needs. I can’t say I’m a fan of punching perman…

Not exactly sure how streamlined your security process is, but for some orgs it is a red tape roller coaster to even get one TCP port open.

Anyways, you could also block all traffic to ngrok servers just to ensure your Dev teams aren't skirting around your firewall.

Re: Pgrok – Poor Man’s Ngrok

#8

> This is intended for small teams that need to expose the local development environment to the public internet As someone who has to manage enterprise firewalls, this is a nightmare from a security perspective. I’m more than happy to host some project in a DMZ. I have already had some devs skirt our security policies with ngrok rather than simply talk to us about their needs. I can’t say I’m a fan of punching perman…

Not exactly sure how streamlined your security process is, but for some orgs it is a red tape roller coaster to even get one TCP port open. Anyways, you could also block all traffic to ngrok servers just to ensure your Dev teams aren't skirting around your firewall.

Ngrok is just one company tho, there are thousands of ways. Wireguard or nebula can be selfhosted and another server with an actual port open will forward traffic. People can use SSH's reverse port forwarding too.

Or you can use cloudflared or another one of ngrok's competitors.

Re: Pgrok – Poor Man’s Ngrok

#9
post #4

I was under the impression that pgrok was unmaintained until now, to the extend that I was looking for alternatives. Did I miss something?

I'm on mobile so it's hard browse the repo, but it looks like the initial commit was 4 days ago. So I think this would be a different project with the same name.

https://github.com/pgrok/pgrok/commit/1f57713c323ea494780590...

Re: Pgrok – Poor Man’s Ngrok

#10
Why do projects that are meant to be lightweight use Postgres instead of SQLite? The latter is much easier to deploy (you, well, just don't need to), and does 99% of what anyone needs, and definitely 100% of what small projects need.
Post reply on HN