[Server-devel] [XSCE] DRAFT: How can one remotely access Internet-in-a-Box servers?

[Adam Holt]

On Mar 10, 2017 2:09 AM, "Anish Mangal" <anishmg at umich.edu> wrote:

On Fri, Mar 10, 2017 at 12:30 PM, Tony Anderson <tony_anderson at usa.net>
wrote:

> Hi, Anish
>
> That would be helpful. Behind a router means, I believe, that the internet
> connection is made through the router's firewall. As I understand it, that
> firewall uses NAT to return the response to the correct client. So I am not
> sure how the presence of a proxy would interfere even in this case with
> setting up an ssh session to the schoolserver.
>

OpenVPN is _meant_ to work in such a setting. And many other settings. It
doesnt depend on an external router NATting. Thats the whole point of it.


>
> My understanding of an appliance is that it works without administration,
> so I am not clear on how such a configuration fits into this discussion.
>
>
'Appliance' here means that the XSCE doesn't control the network, rather is
just another device on it.

https://github.com/iiab/iiab/blob/6.3-wip/docs/NETWORKING.rst


Updated version of the above doc:
https://github.com/xsce/xsce/wiki/IIAB-Networking

This will eventually be moved to:
https://github.com/iiab/iiab/wiki



Tony
>
>
> On 03/10/2017 02:38 PM, Anish Mangal wrote:
>
> There are cases where the schoolserver is setup as a network appliance too
> and typically behind a router. I think, that is why VPN was chosen so it
> covers more bases. Perhaps George can elaborate.
>
> On Fri, Mar 10, 2017 at 11:15 AM, Tony Anderson <tony_anderson at usa.net>
> wrote:
>
>> Hi, Anish
>>
>> In school server situations I am familiar with, the access to the
>> internet would be by GSM dongle or an ISP. In both cases, the connecton
>> would not be through a router or even a proxy firewall. If a firewall were
>> present, it normally arranges for clients to access external sites using
>> dhcp so that shouldn't be a problem.
>>
>> Tony
>>
>>
>> On 03/10/2017 01:28 PM, Anish Mangal wrote:
>>
>> I guess one reason could be that with VPN you dont have any issues around
>> NATting. What Tony is saying requires the schoolserver to have a public IP
>> address when connected, which wont be the case many times (for example, if
>> you are behind a router etc.) vpn makes that relatively easier.
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.laptop.org/pipermail/server-devel/attachments/20170310/fdef6eca/attachment.html>