MyIVO SSL Tunneling Guide (for technical users)
What is MyIVO SSL Tunneling?
How does MyIVO SSL Tunneling work?
When to use MyIVO SSL tunneling?
How to use MyIVO SSL tunneling?
Application Server Access Examples
Links to popular network access programs that can run on MyIVO SSL tunnel
What is MyIVO SSL Tunneling?
SSL Tunneling can be used to add SSL functionality to commonly used inetd daemons
like POP2, POP3, and IMAP servers without any changes in the programs' code.
MyIVO provides SSL tunneling without the need to purchase or install SSL VPN
software or appliances.
How does MyIVO SSL Tunneling work?
The SSL connection between MyIVO client and MyIVO server can be used to tunnel
data communication securely between local application client and it's corresponding
application server running on any computer in the remote network.
In the illustrated diagram, the Outlook
email client on Computer A communicates with the POP email server on Computer
C via the SSL Tunnel provided by MyIVO service (MyIVO Client relay and MyIVO
server relay).
- On computer A, MyIVO client listens on a port 123, Outlook's POP server
configuration is set to "localhost" on port 123.
- Outlook connects to "localhost" at port 123, MyIVO client accepts the connection
and forward it to MyIVO server at the other end of the SSL connection.
- MyIVO server then forward the connection request to the POP mail server
listening on port 110 on computer B.
- From then on, connection is established between Outlook and POP mail server,
and their data communication is relayed by the MyIVO SSL tunnel.
When to use MyIVO SSL tunneling?
In most cases, it is suffice to use MyIVO Remote Desktop Control for accessing
applications and networking resources in the remote network. This is because
you are virtually in front of the remote computer and working on it. However,
there are situations when using tunneling method is preferred:
- When there is no corresponding application client on computer A to access
application server in the remote network. For example, your server application
only works with LINUX client, while computer A is running Windows.
- When using tunneling method result in better performance. For example, if
you are accessing a Windows Terminal Server, running the Windows RDP client
on computer A. You will get faster visual responses than running Windows RDP
client on computer B and view the screen updates of computer C.
How to use MyIVO SSL tunneling?
- Go to www.myivo.com in your Web browser, sign on to MyIVO and click on
your remote computer name to connect. Upon successful connection, you will
be prompted to enter access code for the remote computer. You then select
"Startup Application to SSL Tunneling".
- After enter correct access code, the startup application will be launched
inside the browser. If your startup application is not "SSL Tunneling", right
click on "MyIVO Menu", and select "SSL Tunneling".
- Under "Create New SSL Tunnel", specify the target server and port, and
then click on "Create New SSL Tunnel" button.
- Upon successful SSL tunnel creation, a new entry will be added to the list
panel for the newly created tunnel:
" (local listening port) -> remote : STATUS: waiting for local connection"
- Then launch your application and configure it's server to be "localhost"
and port to be "local listening port". When your application successfully
connects with remote server, the corresponding entry in the list panel will
change to "STATUS: running".
- Repeat step 3-5 for each execution of your application.
Application Server Access Examples
For simplicity, in the following examples, we assume remote server name is "remote-server"
and the newly create MyIVO SSL Tunnel port is "123".
- Windows 2000/2003 Terminal Server or Windows XP Remote Desktop:
1) specify "remote-server:3389" to create tunnel;
2) specify target computer as "127.0.0.2:123" in your Remote Desktop Connection
client. Note that, using "127.0.0.1" will not work.
- VNC Server (default display 0, port 5900):
1) specify "remote-server:5901" to create tunnel;
2) specify target VNC server as "locahost::123" when launch your VNC viewer.
Note that, there are double ':'.
- SSH Server (default port 22):
1) specify "remote-server:22" to create tunnel;
2) For a POSIX compatible ssh command line program, launch it like "ssh -p
123 .... localhost".
- Web Server (default port 80):
1) specify "remote-server:80" to create tunnel;
2) specify "http://localhost:123" as the URL.
Links to popular free network access programs that can run on MyIVO
SSL tunnel
