If they want to restrict external access then they are using some form of
access-list. Firewalls can process static ip addresses much faster than DNS
domain names. I would get VPS like digital ocean. You can get a cheap
server for $5/mo and set up OpenVPN or an SSH proxy.

On Sun, Nov 26, 2017 at 5:18 PM, David Schwartz <newsletters@thetoolwiz.com>
wrote:

> I’ve got a shared hosting account and asked if I’m able to install a git
> repo host (eg., from gitlab) so I can use it to host my own private git
> repos.
>
> I’m not very famliar with git or hosting it, but I understand that It
> requires an SSH connection for the transfers.
>
> I asked the support folks, and they replied that they can do that, but
> they need to configure it so the SSH uses a static IP so they can
> white-list it in their firewall.
>
> That requires me to always access it from the same place, which seems a
> bit over-restrictive for my needs.
>
> (I have Cox internet at home, so I probably have a static IP most of the
> time, at least until I reboot my modem and it allocates a different IP.)
>
> I’m wondering if there are any options where I could use, say, a VPN, to
> set up a redirect such that the outgoing IP for the SSH is always static?
>
> Anybody familiar with git is free to offer alternatives. Frankly, I’m not
> sure why it would be built exculsively on using SSH as the data channel.
> Doesn’t it have any other means of connecting to it?
>
> Alternatively, this hosting account is a reseller account, and while I’m
> not exactly sure how many IPs they give me, I know they’re all static.
>
> So I could set up another domain on the same host with something that lets
> me do a redirect to the SSH on the other domain where git is hosted?
>
> Alternatively, what’s wrong with just using a port for the SSH channel way
> up in the 20,000 range?
>
> I get their concern with security, but … solving the problem with a static
> IP seems so 1990ish.
>
> Suggestions are welcome.
>
> -David Schwartz
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.phxlinux.org
> To subscribe, unsubscribe, or to change your mail settings:
> http://lists.phxlinux.org/mailman/listinfo/plug-discuss
>