http proxy to establish tcp tunnel: HTTP proxy to establish TCP tunnel method

Hands-on with HTTP Proxy Tunneling

Recently, some friends asked me how to use the HTTP proxy to engage in TCP tunneling, this thing sounds mysterious in fact, especially simple. Let's use the most down-to-earth way today, break open the crumbs to talk about this matter.

Tunneling principles in layman's terms

An HTTP proxy is essentially asecond passer (in soccer)The TCP tunnel is a way for the proxy server to maintain a long connection with the target server, as if it were digging an exclusive tunnel between the two. The establishment of a TCP tunnel is to let the proxy server to help us and the target server to maintain a long connection, as if between the two dug a dedicated channel. For example, you want to access the database port of a website, but the direct connection will be blocked by the firewall, this time you need a proxy to act as a middleman.

import socket

 Example of proxy configuration with ipipgo
proxy_host = "gateway.ipipgo.com"
proxy_port = 9021
target_host = "Target server IP"
target_port = 3306

proxy = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
proxy.connect((proxy_host, proxy_port))
proxy.send(f "CONNECT {target_host}:{target_port} HTTP/1.1rr".encode())
response = proxy.recv(4096)

Three axes for real-world configurations

Tip #1: Pick the right type of agent

Tip #2: Don't step on potholes with protocol settings

Remember that HTTP proxy only recognizes ports 80/443 by default, if you want to use other ports, you have to check with your service provider in advance. Like ipipgo's TK line supports customized ports, which is especially suitable for those who want to connect to the database.

Tip #3: Timeout Parameter Tuning

Tunnel keep-alive time is recommended to be set between 120-300 seconds, too short is easy to disconnect, too long is a waste of resources. If you use the ipipgo client, their intelligent keep-alive function will automatically optimize this parameter.

Frequently Asked Questions First Aid Kit

Q: The tunnel is built but the data can't be transmitted?
First check the response header of the proxy server, the normal is to return "HTTP/1.1 200 Connection established". If you see 407 error code, it is likely that the authentication did not pass, remember to add Authorization field in the request header.

Q: How can I avoid my IP being blocked by the target server?
With dynamic residential IP pools switching automatically, ipipgo's Enterprise package can change 100+ IPs per minute, much more reliable than manual switching.

Q: Will there be conflicts when I open more than one tunnel at the same time?
Not as long as you use a different proxy channel, it is recommended to open separate sub-accounts for each business. ipipgo supports multi-account management, and you can also set traffic quotas.

The doorway to choosing a proxy service

There are numerous agency service providers on the market, but those who can fulfill both theLow latency, high anonymity, full protocolThere are really not many of these three conditions. Like ipipgo's cross-border line, the measured delay can be controlled within 50ms, which is more than 3 times faster than ordinary agents.

The design of their packages is also really good:

• Personal users choose dynamic residential (standard) enough, more than 7 dollars 1G traffic
• Enterprise level business directly on the enterprise version, more than 9 dollars also with exclusive customer service
• If you need a fixed IP to choose a static home, 35 dollars a month is quite a good deal!

As a final note, it is important to follow local regulations when tunneling with proxies. Like game acceleration, data collection and these legitimate uses is perfectly fine, but do not use it to do illegal things. The key is how to use it, isn't it?