Home / server / Questions / 63929
Accepted
asdmin
Asked: 2009-09-10 13:59:30 +0800 CST

tunnel over https proxy server (client-server model)

  • 772

I need to get reliable Internet connection behind a restrictive firewall.

facts:

  • firewall handless HTTP CONNECT to anywhere as long as it goes to destination port 443
  • I have some servers publicly accessible on Internet but they are all handling traffic on port 443

Therefore:

  • I cannot use "regular" tunnel over http tools like corkscrew or httptunnel as my port on 443 is busy
  • I cannot connect to any other ports but 443, as http proxy will not let me do it,
  • I cannot change already-running https server's port on my servers

As I operate a reverse-proxy (pound proxy, a http-http router and load balancer) on port 443, I could start a "fake" httpd behind my reverse-proxy and set my reverse proxy to handle tunnel oriented connections to this "fake" httpd, which would handle the connections from my computer behind the restrictive proxy.

Do anyone knows a http IP tunnel software which operates as a client-server model and uses "fake" httpd to listen to incoming tunnel connections?

linux

3 Answers

  1. You can use openvpn http://www.openvpn.net/. On client side use protocol TCP and proxy. On server side use protocol TCP and port share with apache server not work on Windows.

    • 1
  2. Best Answer

    HTTPTunnel is just the thing I looked for

    • 1

  3. Hmmm.. Not sure if I understand you correctly. It sounds like you are trying to tunnel in from the Internet, which is why you want a server model but it also sounds like you are trying to tunnel out to the Internet, because you are using CONNECT over a proxy.

    Now, assuming that you are trying to tunnel out to ports other than port 443, you can have a second proxy set up externally and use a two layer tunnel-over-a-tunnel as I think you have already figured out.

    Assuming that you are trying to tunnel into the network to ports other than port 443, this could turn into a security hole that you do not want. So, it may be best to just forward the connections from your firewall into the internal system.

    • 0