I'm pretty new to selfhosting and homelabs, and I would appreciate a simple-worded explanation here. Details are always welcome!
So, I have a home network with a dynamic external IP address. I already have my Synology NAS exposed to the Internet with DDNS - this was done using the interface, so didn't require much technical knowledge.
Now, I would like to add another server (currently testing with Raspberry Pi) in the same LAN that would also be externally reachable, either through a subdomain (preferable), or through specific ports. How do I go about it?
P.S. Apparently, what I've tried on the router does work, it's just that my NAS was sitting in the DMZ. Now it works!
Your stuff is more likely to get scanned sitting in a VPS with no firewall than behind a firewall on a home network
Why wouldn't you setup a firewall on the VPS?
all home routers have NAT which functions as a firewall, but VPSes don't cone with any firewall by default, so you'd have to set one up. Also VPS ranges seem to hotter for scanning.
You don't need NAT for a Firewall. NAT doesn't provide any security benefits what so ever.
If you put something on the internet it should always have a Firewall. Use either ufw or firewalld. I don't see your argument since anything the bots can each will get probed.
Unless your home internet is CG-NAT, both have a publicly accessible IP address, so both will be scanned