Episode Details

You've locked down your admin panel to a single IP. Works great from home. But what happens when you're on a train in Belgium trying to SSH into production? This episode tackles the two-part question: first, the practical mechanics of getting a fixed egress IP from anywhere — DIY WireGuard VPS, Mullvad with Tailscale, Cloudflare Zero Trust, and more. Then the harder question: is IP allowlisting an outdated security model in 2026? We walk through six tool categories, their gotchas, and whether you should be replacing IP lists with mutual TLS, identity-aware proxies, or zero-trust access.