Client reverse proxy support

[ninekeem]

Issue Details

So, as I read the docs, TrustTunnel server can use HTTP reverse proxy to route traffic further, but I didn't found this functional for client. It might be useful in setup like this: TT Client -> HTTP Reverse Proxy -> TT Server

Proposed solution

Implement reverse proxy support in TT Client

Alternative solution

Allow to set up TT Client and TT Server on one device (e.g Android) to create setup like this: TT Client -> TT Server -> HTTP Reverse Proxy -> TT Server

[anyakushin]

Hello, please explain the setup you want and what are your goals in details. Client implementations are generally agnostic to reverse proxy and do not require any additional support. TrustTunnel perfectly works with endpoint behind, e.x. the nginx reverse proxy using ssl_preread

[anyakushin]

@ninekeem Hi again, is this issue still relevant for you?

[somersetcamper]

@ninekeem Hi again, is this issue still relevant for you?

I too would be interested in the functionality. I would like to host trusttunnel behind a reverse proxy using IIS so I can share the same IP and port 443 with other websites.

[anyakushin]

@somersetcamper Hello! Could you explain what the functionality you literally want? As i mentioned in #71 (comment), the setup with nginx's ssl_preread works perfectly and i can't imagine any other use case that could require any additional functionality on the client side

[anyakushin]

As conclusion: TrustTunnel client correctly works with the endpoint behind reverse proxy.

All you need is to specify the address of the reverse proxy (instead of endpoint's address) in the client config and configure the reverse proxy to route traffic to the endpoint.

To serve multiple services behind one reverse proxy you could use the SNI matching, e.x. i personally have tested the nginx's ssl_preread feature and the whole setup works like a charm.

Also please note that generally all clients are agnostic to the reverse proxy and shouldn't know if there is any, this is the way reverse proxy suppose to work.

Please feel free to open a new issue if there is something we've missed but please provide the details for the feature you want.
Closing this for now.