Proxy Tunnel Forwarding: Proxy Tunnel Forwarding Technology Explained, Multi-Layer Encryption Implemented

What exactly is proxy tunnel forwarding?

Recently, I'm always asked if the data will be peeked at when using a proxy IP. This is to talk about tunnel forwarding technology. Simply put, it's like sending a courier to the package with three layers of shockproof film, in the middle of a number of transit stations, each site will be repackaged and encrypted.

Ordinary proxy is like a courier bill directly write the recipient's address, tunnel proxy is the courier bill information written in cipher text, each time the transit is to change the packing box. For example, with ipipgo Socks5 proxy to do the first layer of encryption, and then set on the TLS protocol to do the second encapsulation, and finally use SSH tunneling to do port forwarding, so that even if someone intercepts the packet, can only see the garbled code.

Hands-On Multi-Layer Encrypted Tunneling

Here's a configuration scenario (in Python, for example) that anyone can understand:

import requests

 Layer 1: Socks5 proxy
proxy1 = "socks5://user:pass@gateway.ipipgo.net:1080"

 Layer 2: HTTPS tunnel
proxy2 = {
    'http': 'http://tunnel.ipipgo.net:3128',
    'https': 'http://tunnel.ipipgo.net:3128'
}

 Double proxy for the actual request
response = requests.get('target url', 'proxies={'http': proxy1, 'https': proxy1 }
    proxies={'http': proxy1, 'https': proxy1},
    headers={'Proxy-Tunnel': proxy2}
)

watch carefullyProxy-TunnelThis custom header, this is our second layer encrypted tunnel. Using ipipgo's API you can directly get the tunnel address with the authentication information, which is much less work than trying to do it yourself.

There is a way to choose the agreement

You have to pick the right combination of encryption for different businesses, so here's a comparison table for you:

In particular.TK LineThis is a good thing, comes with the protocol obfuscation function. Last time there is a cross-border e-commerce friends, with the ordinary agent is always recognized, after changing into TK line traffic disguised as video traffic, the problem is directly solved.

Why do you recommend ipipgo?

After using seven or eight proxy services, I ended up using ipipgo for the long term for three reasons:

1. his familyDedicated Static IPIt really binds the MAC address and is much more stable than those shared pools
2. I can't believe someone replied to my work order at 3am, tech support is not a fixture!
3. The price list is clear, no tricks, 35 dollars a month static IP enough for small teams to use the

Highlighting theircross-border rail line，走的是运营商骨干网。测试过从香港到洛杉矶的，比普通线路快200ms左右，做实时数据同步时特别明显。

Frequently Asked Questions QA

Q: Will multiple layers of proxies slow down the internet speed?
A：好的服务商（比如ipipgo）有智能路由，实测三层的增加不超过15%。如果是关键业务，建议用他们的独享线路。

Q: Build my own tunnel or use an off-the-shelf service?
A: Small scale with off-the-shelf services saves money. If the average daily request volume is more than 500,000 times, you can find ipipgo customized solution, they can optimize the encryption strategy according to the type of business.

Q: How do I check if encryption is in effect?
A: It is recommended to use the ipipgo client in theTunnel Inspectionfeature that can visualize the handshake process of each layer of the protocol. Or use Wireshark to capture packets, normally you should only see TLS traffic features.

The last thing I'd like to remind you is to choose a proxy service and not just look at the price. Like some 7 yuan / GB package, the actual use of packet loss rate of 20% simply can not be used. ipipgo dynamic residential package although more expensive 2 yuan, but comes with QOS protection, the key moment does not fall off the chain is really save money.