Here's the background: my niece and nephew are big on games and they want to have their own server. Their mother wants something that can be at home and played only by kids they have over or something that can be played by neighborhood kids.
My initial idea is that I could have a VM that would be in their home, then rsync or replicate to the DC VM.
Here's my question to you guys, has anyone done a similar setup? I know like every kid plays mincraft these days so someone has had to build a server or two for it. I'm also worried about DDoS attacks. Is there a way I can give kids some kind of auth token that lets them see the server? I was almost thinking it'd be cool if you could use a device like a raspberry pi as a VPN gateway. Get one for each kid that you want on the server's home and there's no other way to get to the server except through VPN.
So here's the idea in text diagram for the neighborhood:
Kid 1 PC > Raspberry Pi2 > local LAN router > Internet > colo firewall > game server VM (internal only IP)
Is that making things too complex? Trying to figure out a way to restrict access to LAN/ trusted WAN players (neighborhood kids) and lower attack profile.
My initial idea is that I could have a VM that would be in their home, then rsync or replicate to the DC VM.
Here's my question to you guys, has anyone done a similar setup? I know like every kid plays mincraft these days so someone has had to build a server or two for it. I'm also worried about DDoS attacks. Is there a way I can give kids some kind of auth token that lets them see the server? I was almost thinking it'd be cool if you could use a device like a raspberry pi as a VPN gateway. Get one for each kid that you want on the server's home and there's no other way to get to the server except through VPN.
So here's the idea in text diagram for the neighborhood:
Kid 1 PC > Raspberry Pi2 > local LAN router > Internet > colo firewall > game server VM (internal only IP)
Is that making things too complex? Trying to figure out a way to restrict access to LAN/ trusted WAN players (neighborhood kids) and lower attack profile.