Reverse Connection Proxy Service: Fire Penetration Techniques Explained

What the heck is a reverse connection proxy?

Many friends have encountered this situation: their own server hiding behind the company fire, the extranet can not be connected. At this timeReverse Connection ProxyIt comes in handy, in human terms, is to let the intranet device actively looking for the extranet server "recognize", the fire will not stop. This trick is especially suitable for remote maintenance of equipment, such as the deployment of IoT devices to customers to do remote debugging.

Why are traditional agents bad?

Ordinary forward proxies are like messengers, the client says "contact the server for me" and the proxy helps to deliver the message. But when it comes to fire prevention, this kind of straight forward communication will be cut off in minutes. That's whenReverse Connection ProxyThe advantage of this comes out - let the controlled device initiate the connection itself, the firewall thinks it is a normal outbound request and naturally releases it.

Five Steps to Real-World Configuration

Using ipipgo's service as a chestnut, it's actually a thief to configure:
1. Open a backend in ipipgo.Tunnel ServicesIf you want to use the connection key, write down the generated connection key
2. Install their lightweight client on the controlled device (Windows/Linux support)
3. Fill in the key and the local port to be exposed.
4. The client automatically connects to the ipipgo transit server.
5. You can access it from anywhere with the public address provided by ipipgo.

Focus on the third step:local port mappingDon't make a mistake. For example, if you want to remote desktop, map port 3389; if you want to SSH, map port 22. ipipgo has a smart detection function, which can automatically identify common service ports, which is especially friendly to newbies.

What scenarios must I use this for?

1. Intra-enterprise system maintenance: centralized control of branch servers
2. Remote upgrade of IoT devices: avoiding individual configuration of each device
3. Temporary commissioning of equipment: no need to ask the webmaster to change fire rules
4. Cross-geographic data transfer: Addressing network policy limitations in certain regions

Last week there was a customer to do smart charging pile, the national cloth more than 2000 devices, is to use ipipgo's reverse proxy solution to do the centralized management, save the trouble of one by one configuration.

Frequently Asked Questions QA

Q: Will I be speed limited by my carrier?
A：ipipgo用的是企业级中转节点，自带智能路由优化。实测在移动网络下，能控制在150ms以内。

Q: How do I manage multiple devices at the same time?
A: Their management backend supports device grouping and can operate in batch. Each device has an independent identification and will not interfere with each other.

Q: How is data security ensured?
A: three-point protection: ① full-link TLS encryption ② dynamic token authentication ③ connection behavior audit log. ipipgo last year also took the third level of certification, security can rest assured.

Finally said a cold knowledge: many counterparts are still using the traditional program, in fact, the reverse proxy resource consumption is only 1 / 3. Especially with ipipgo this specially optimized service, the monthly traffic costs can save a big half. Need long-term stable service, it is recommended that they directly on the enterprise version of the package, with exclusive channel and 7 × 24 technical support, used to say really good.