[dba-Tech] Extranet VPN for testing customers' web sites/web API solutions

[Gustav Brock]

Hi Shamil

Great. 
I've always found TeamViewer to be overpriced, so let's hope that SoftEther will be successful.

/gustav

-----Oprindelig meddelelse-----
Fra: dba-Tech [mailto:dba-tech-bounces at databaseadvisors.com] På vegne af Salakhetdinov Shamil via dba-Tech
Sendt: 3. august 2017 15:47
Til: Discussion of Hardware and Software issues <dba-tech at databaseadvisors.com>
Cc: Salakhetdinov Shamil <mcp2004 at mail.ru>
Emne: Re: [dba-Tech] Extranet VPN for testing customers' web sites/web API solutions

Hi Gustav et al --

I have setup TeamViewer (v12.0.81460) on cloud MS Windows Server 2012 VM to allow unattended access (maybe basic access would have been enough I haven't checked).
I have also setup TeamViewer (v12.0.81460) on my destop Win10 system.
Then I have run TeamViewer and setup VPN using it to my MS Windows Server 2012.
I have opened port 80 on cloud VM - and I have got access to the server web app running on this port - default IIS web app.
Then I have setup my custom web service on port 4321, opened this port for TCP on server and I have got access to the custom web service via VPN and port 4321.

So VPN works well - not sure how TeamViewer sets up VPN access internal - does it use netsh or not.

I the coming days I will also try to use SoftEther VPN Open Source (  https://www.softether.org/  ) to setup VPN instead on TeamViewer.

-- Shamil

>Thursday, August  3, 2017 2:46 PM +03:00 from Salakhetdinov Shamil via dba-Tech <dba-tech at databaseadvisors.com>:
>
>Hi Gustav --
>
>OK, I will give it a try and I will post here in the coming days on my testing results.
>
>-- Shamil
>
>
>>Thursday, August  3, 2017 1:34 PM +03:00 from Gustav Brock < gustav at cactus.dk >:
>>
>>Hi Shamil
>>
>>I can't tell about the VPN infrastructure as that must be a courtesy of your hosting provider, but as you have a VM and not just a web server, I guess no ports are blocked.
>>
>>The only way to find out if the netsh command will work, is to check it out. Even though port 80 is default for the HTTP protocol, I would explicitly specify it as you suggest.
>>
>>/gustav
>>
>>-----Oprindelig meddelelse-----
>>Fra: dba-Tech [mailto:dba-tech-bounces at databaseadvisors.com] På vegne af Salakhetdinov Shamil via dba-Tech
>>Sendt: 3. august 2017 12:18
>>Til: Discussion of Hardware and Software issues <  dba-tech at databaseadvisors.com >
>>Cc: Salakhetdinov Shamil <  mcp2004 at mail.ru >
>>Emne: Re: [dba-Tech] Extranet VPN for testing customers' web sites/web API solutions
>>
>>Hi Gustav --
>>
>>Thank you for the example you found.
>>
>>So using netsh and having VPN infrastructure activated and configured for the case
>>
>>1. Customer #1 would get access to virtual IP 15.27.103.185 referring real IP:Port  123.17.82.45:2337
>>
>>the Cusomer #1 should run the following netsh command:
>>
>>netsh interface portproxy add v4tov4 listenport=80 listenaddress= 15.27.103.185 connectport=2337 connectaddress= 123.17.82.45 ?
>>
>>Not sure about listenport=80 value, not sure about if it works at all what I'd like to get in this case is the Customer #1 typing
>>
>> http://15.27.103.185
>>
>>in his browser and accessing web site running on my cloud VM on  http:// 123.17.82.45:2337  (Use sase #1.1)
>>
>>or the Customer #1 WinForms/WPF/UWP/... application communicating with a RESTFul Web API via 
>>
>> http://15.27.103.185
>>
>>and actually getting connected with the RESTFul Web API on http:// 123.17.82.45:2337  (Use sase #1.2)
>>
>>Do you suppose use cases #1.1 and #1.2 are doable this or that way?
>>
>>Thank you.
>>
>>-- Shamil
>>
>>
>>>Thursday, August  3, 2017 12:41 PM +03:00 from Gustav Brock <  gustav at cactus.dk >:
>>>
>>>Hi Shamil
>>>
>>>I believe the native command netsh is for this (and many other tasks).
>>>
>>>I found this example on port forwarding in windows:
>>>
>>>      https://stackoverflow.com/a/11535395/3527297
>>>
>>>Another option seems to be nginx. 
>>>
>>>I haven't tried any of these methods.
>>>
>>>/gustav
>>>
>>>
>>>-----Oprindelig meddelelse-----
>>>Fra: dba-Tech [mailto:dba-tech-bounces at databaseadvisors.com] På vegne af Salakhetdinov Shamil via dba-Tech
>>>Sendt: 3. august 2017 11:25
>>>Til: Discussion of Hardware and Software issues <  dba-tech at databaseadvisors.com >
>>>Cc: Salakhetdinov Shamil <  mcp2004 at mail.ru >
>>>Emne: [dba-Tech] Extranet VPN for testing customers' web sites/web API solutions
>>>
>>>Hi All --
>>>
>>>I have a hosted on a cloud MS Windows Server 2012+ VM and I'd like to setup my customers' testing web sites/web API solutions.
>>>The hosted VM has its own IP but I'd like to virtualize access to customers' testing web sites by using virtual IPs, which, as I expect could be provided by a VPN infrastructure/software.
>>>
>>>For example via VPN:
>>>
>>>1. Customer #1 would get access to virtual IP 15.27.103.185 referring real IP:Port  123.17.82.45:2337 2. Customer #2 would get access to virtual IP 15.27.103.142 referring real IP:Port  123.17.82.45:2338 ...
>>>N. Customer #N would get access to virtual IP 15.27.103.1147 referring real IP:Port  123.17.82.45:2399
>>>
>>>(all the IP addresses and ports above are just sample ones not having any real refs) 
>>>
>>>Is it possible?
>>>
>>>If it's possible what software would you recommened to setup on server side? 
>>>This one looks good -  https://www.softether.org/1-features ?
>>>
>>>I'd prefer free/not very expensive solution on server side and free solution for client/customers side.
>>>
>>>NB: I currently prefer to not use MS Azure, AWS etc.
>>>
>>>Thank you.
>>>
>>>-- Shamil