From VPS to a Smart, Cost-Effective Solution

A customer asked us for a VPS. We found a better fit: a secure setup built on equipment they already owned, at a fraction of the ongoing cost.

The situation

A customer with an e-commerce business came to us asking for a VPS. We asked about their use case, and pointed out the significant ongoing costs of a VPS.

It turned out they needed to give an overseas supplier partner shared access to a system for collaborative tasks. They did not want to share their personal PC on their personal network, which could expose their data and network to security risks.

What we proposed

Instead of a costly VPS, we suggested a custom solution that used their existing home network:

• An old laptop to act as the shared system
• A WireGuard VPN server for secure access
• Dynamic DNS so the server stays reachable

We had already installed a UniFi solution for them, so the implementation went smoothly.

How we set it up

• 01

  Harden the PC

  We made sure it was running the latest version of Windows, and restricted access to specific applications and folders using Windows Policy Manager under the user account to be used for this purpose.

• 02

  Enable remote access

  We enabled Remote Desktop Protocol (RDP) so the supplier could work on the system.

• 03

  Create the VPN

  Using the UniFi OS interface, we set up a WireGuard VPN server and created separate client accounts for the supplier’s users. Strict firewall policies let VPN clients reach only that one PC. Access to the rest of the internal network was explicitly blocked.

• 04

  Control internet use

  We configured the firewall to block internet access (WAN) for connected VPN clients. They have to route their internet traffic through the designated PC, which prevents unauthorized access to other online resources and protects the client’s bandwidth from being misused.

• 05

  Keep it reachable

  The client had no static IP, so we set up Dynamic DNS using a free service such as no-ip.com directly from the UniFi interface. The VPN server stays accessible even when the home IP address changes.

The result

The client and their supplier can now securely access the system from anywhere in the world without the high cost of a VPS, and the integrity and security of the client’s internal network is protected.

What would you have done?

Would you have taken the easier route and suggested a VPS, or pursued a similar custom solution? What other approaches would you consider? We would love to hear your thoughts.

Related services

Network and Wi-Fi · Cybersecurity · Identity services