1

I am working on a platform (www.dashboard.example.com) that has an admin site (www.admin.example.com). Each site is hosted on a different Google Firebase Hosting Project.

I want only certain people to be able to access the admin site. After some consideration, I found an IPSec VPN to be the best solution for me.

I also found that GCP offers a VPN service, but from what I can tell, it seems to only work with google compute engines.

Is there a way to attach a Google VPN to a Firebase Hosted site?

Artur Grigio
  • 5,185
  • 8
  • 45
  • 65
  • 1
    There is currently no way to secure (part of) a web site that is on Firebase Hosting. See https://stackoverflow.com/questions/27212004/can-firebase-hosting-restrict-access-to-resources, https://stackoverflow.com/questions/48140014/firebase-hosting-how-to-prevent-access-for-some-files – Frank van Puffelen Mar 13 '19 at 21:32

1 Answers1

1

There is no way to attach a Cloud VPN to a Firebase Hosting Project.

In GCP the correct way to restrict the access to your web server/application is by using firewall rules/App Engine's firewall and Cloud VPC/VPN service.

Your approach should be to put a proxy by configuring a Google Compute Engine1 in between your gateway service and your Firebase Hosting Project.

Another approach would be to use Cloud Storage2, as a static website3. You can then create an HTTPS Load Balancer based on Backend Bucket4. With this you can benefit from the advantages of using Load Balancer and also using Cloud VPN.

If you are interested in authentication with Firebase and App Engine I suggest to check the following link 2.

Community
  • 1
  • 1
Lozano
  • 170
  • 6