Start a new topic
Implemented

Web Pages over Secure Gateway

Possibility to open / use web pages over the Secure Gateway connections.

So that you don't need to make a VPN for viewing a webpage / management page of a device on a client / other location.

With the Secure Gateway that would be awesome that's not an option now: 


3 people like this idea

This feature is in the Windows version of Royal TS but having it in the TSX version would be so sweet!


1 person likes this

 Ok, first, just started using the Secure Gateway feature in Royal TSX 3.0 last week, and it has become my new best friend.  :-)  So thank you for this feature.  For SSH, VNC, and RDP, it is incredibly easy to setup.


Then today I thought about trying to get at a webpage via similar means, only to find that's not possible.  I'd like so add "yet?" *wink wink*


Ok, seriously, adding that would be very nice, considering Royal TSX supports webpages, and I can see lots of use cases, such as what Kay mentioned (notably if VPNing in isn't even an option).  So I'll add my name to list of folks who would love to see this on the Mac version.

It literally just typed up a question about this exact feature and was pointed to this post! 


I see that the feature is not present on Royal TSX (Mac) but I'm struggling to find the Secure Gateway menu when creating a webpage connection on Royal TS (PC) too.


image



In Royal TS for Windows you need to switch to the Chrome plugin. Then you will see the Secure Gateway configuration. You also need to check the option "Use dedicated engine" on the Engine page and configure the proxy settings to use the Secure Gateway. We will soon post a detailed blog article.


1 person likes this

Stefan,


Is that why we can't have this feature on TSX, because it uses WebKit as opposed to the Chrome plugin? :(

On macOS using WebKit, there's currently no way to support SOCKS proxy configurations. That's why we currently cannot support this scenario on macOS.

Hi Stefan,

is it planned / possible even to implement a Chrome browser engine plugin on OSX as well?

I'm using the Chrome plugin for it's ability to use a specific proxy for a specific web connection, but sharing these configs with colleagues on OSX obviously fails currently. It would be nice if this would be portable as well (in particular since Chrome and its framework is certainly available on OSX as well - it's not like we're asking for an IE engine on OSX :) )

 

Hi Zoltan,


the Chrome engine we're using is provided by a 3rd party vendor who puts in a lot of effort to make the Chrome engine "embeddable". To my knowledge, such an engine does not exist on macOS and would be a huge effort. So for now, I guess the Safari engine is the only thing we can use on macOS.


Regards,
Stefan

Hi Stefan,

CEF seems to be multi-platform: https://bitbucket.org/chromiumembedded/cef

Of course I have no idea if that would work for you and/or what work it needs to be actually implemented in Royal TS/TSX. Just saying that there seems to be something and it supports proxies as well ;)

Cheers,
  Zoltan

 

Hi Zoltan,


yes, CEF would be a viable option. However, the framework is mainly designed for apps to implement a full browser and needs to be hooked into the app at a very low level which wouldn't be compatible with our plugin system. There's also a lot of overhead in terms of file size when embedding CEF.


cheers,

felix

Even though this feature seems far away from TSX, I just wanted say that I'd need it too.


1 person likes this

Any news on this?

It would be so nice, with this we can manage printers etc. without the need of making a VPN connection!

@Kay: Unfortunately we don't have any news about this particular feature request at the moment.

Hi Felix, good to know that you have hands on it.  Yes, I understand SOCKS and problem with Mac Safari. But other side, why you need socks? Yes, its much easy to implement this, but it is possible to make it without SOCKS with only LOCAL forwarding. I mean this can help so many people, that this can be implemented.


Simple Flow Example:

I'm with pc in segment 192.168.0.0/24 (can only ssh to 10.10.10.1 ) 

1. Create Secure Gw (to 10.10.10.1)

2. Create WebPage with url  https://10.10.10.2 (no hostnames, (have not exactly looked how are translated names over proxy)) and with secure gateway 10.10.10.1

3. Starting WebPage

4. royaltsx makes in Secure Gateway LOCAL forwarding so: 12345:10.10.10.2:443  (12345=free random port, https=443 only if is not defined :port in URL) [for http is same logic]

5. royaltsx replaces https://10.10.10.2 with https://127.0.0.1:12345 and opens webpage through secure gw.


Cons:

- maybe it is functional only with IPs ( i mea for admins is it not so big problem)

- it is not possible to use sites that are actively using more than one ports in web solution (in http redirects) - for example you are on 127.0.0.1:34355 and is comming redirect to 10.10.10.2:8080


What you mean about it?


With best Regards

Josef Svitak

Login or Signup to post a comment