How does the TCP/UDP ports proxy work

[barcelona92]

Let me explain.

I have Traccar and Unifi Controller installed, and I currently have port forwarding from my router/firewall to the LXC IPs with their corresponding ports forwarded.

I tried forwarding them to the proxy IP and redirecting those ports to the LXC IPs with their ports, but it doesn't work.

[tobychui]

@barcelona92 It works pretty much same as what you would expect, it listen to the given port (e.g. 5023), when there is an incoming connection, it spawn two go routine that copy bidirectional TCP (or UDP traffics) and forward it to the other side.

You can find the source code here.
https://github.com/tobychui/zoraxy/blob/main/src/mod/streamproxy/tcpprox.go

[vwccvr6]

@barcelona92 It works pretty much same as what you would expect, it listen to the given port (e.g. 5023), when there is an incoming connection, it spawn two go routine that copy bidirectional TCP (or UDP traffics) and forward it to the other side.

You can find the source code here. https://github.com/tobychui/zoraxy/blob/main/src/mod/streamproxy/tcpprox.go

Is a TLS termination planned for the stream proxy?

[tobychui]

Is a TLS termination planned for the stream proxy?

What do you mean? TLS can be used on http / TCP or UDP and they are not technically related in the context of stream proxy.

[vwccvr6]

What do you mean? TLS can be used on http / TCP or UDP and they are not technically related in the context of stream proxy.

I'm sending encrypted TCP data. I'd like the stream proxy to encrypt that data and forward it to my backend service.

[tobychui]

@vwccvr6 The stream proxy do not decrypt your data during package forwarding. So basically what goes in is what came out, just with a different port and destination.

You can take a look at the OSI model regarding the difference between different routing layer if you want to learn more.

[vwccvr6]

@tobychui thanks for ur answer.
I was think about something similar to how NGINX stream with TLS encryption works. Where NGINX accept the encrypted TCP, decrypt it and forward it in plain TCP to the destination.

NGINX is what I'm using at the moment. Just wanted to have a look on same other tools.