WDH-057 Websites, Domains & Internet Infrastructure
Could the website be exposed through a tunnelling service?¶
Yes. A tunnel can make a private or self-hosted service publicly reachable through external infrastructure.
The local device creates an outbound connection to the provider. Visitors connect to the provider, which forwards traffic through the tunnel to the internal system.
Investigative value¶
The provider may hold:
- account details;
- assigned hostnames;
- connection records;
- source IP addresses;
- access history; and
- payment information.
The local device may hold the tunnel client, configuration, credentials and logs.
The visible IP or hostname may identify the provider rather than the origin device. Credentials may be shared or stolen, and the local device may be compromised.
Key takeaway
Trace both sides of the tunnel: the external provider account and the internal device receiving the traffic.