3 ms·
Consider whether routing everything across HTTPS / websockets would fix this problem. In my experience, you only have to prostrate yourself before the firewall
by michaelt 4y ago
Consider whether routing everything across HTTPS / websockets would fix this problem.
In my experience, you only have to prostrate yourself before the firewall bureaucracy if you want to use something other than port 443. And if they do restrict port 443 they'll use some form of proxy or SNI whitelisting, granting access by domain name instead of IP address.
- Gasp0de 4y agoWe do have a solution like this for chinese customers, using stunnel and tinyproxy. However, it adds quite a bit of complexity to the customer side config which I would like to circumvent if possible. Also, this is in an industrial setting, so a random machine in a factory would also not be allowed to use port 443 normally.