Re: [paho-dev] Firewall/proxy settings/capability for MQTT

[Ian Craggs <icraggs@xxxxxxxxxxxxxxxxxxxxxxx>]

Andrew, Roger,

thanks for your responses.  Very helpful.

Ian


On 01/08/2015 10:08 PM, Andrew McClure wrote:
> Have you tried using something like haproxy? This should work seamlessly. Let me know if you get stuck.
>
> A little off topic but I'd love to see some develop a MQTT mode for haproxy that stores sessions based on clientId and user/password - then allows different output options based on the connection.
>
>
> On 9/01/2015, at 11:01 am, Roger Light <roger@xxxxxxxxxx> wrote:
>
> > Hi Ian,
> >
> > The best bet from what I've seen is a SOCKS proxy. http proxies just
> > won't work. SOCKS proxies pass on basically any tcp connecions. I've
> > got support for SOCKS5 proxies in mosquitto_pub and _sub in the
> > mosquitto 1.4 branch if you want to give it a try.
> >
> > Running "ssh -D 1080 <host>" creates a socks proxy from localhost:1080
> > to host, assuming you have port forwarding enabled.
> >
> > There are also ways of wrapping existing code/executables to provide
> > socks support, but I've not got the links to hand.
> >
> > Cheers,
> >
> > Roger
> >
> >
> > On Thu, Jan 8, 2015 at 4:36 PM, Ian Craggs
> > <icraggs@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
> > > Hi All,
> > >
> > > I've had a couple of questions in the last year about proxy settings for
> > > MQTT connections.  There's one right now for the Python client on the Paho
> > > forum
> > > https://www.eclipse.org/forums/index.php?t=msg&th=720281&goto=1552878&#msg_1552878.
> > >
> > > I don't know too much about firewalls and proxies, so I'm looking for some
> > > help here.  Wouldn't the firewall/proxy have to be aware of MQTT to allow
> > > this to work?  Or will a socks proxy work?  Would we have to add anything to
> > > the existing client libraries?
> > >
> > > Thanks
> > >
> > > --
> > > Ian Craggs
> > > icraggs@xxxxxxxxxx                 IBM United Kingdom
> > > Paho Project Lead; Committer on Mosquitto
> > >
> > > _______________________________________________
> > > paho-dev mailing list
> > > paho-dev@xxxxxxxxxxx
> > > To change your delivery options, retrieve your password, or unsubscribe from
> > > this list, visit
> > > https://dev.eclipse.org/mailman/listinfo/paho-dev
> > _______________________________________________
> > paho-dev mailing list
> > paho-dev@xxxxxxxxxxx
> > To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> > https://dev.eclipse.org/mailman/listinfo/paho-dev
> _______________________________________________
> paho-dev mailing list
> paho-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://dev.eclipse.org/mailman/listinfo/paho-dev

--
Ian Craggs
icraggs@xxxxxxxxxx                 IBM United Kingdom
Paho Project Lead; Committer on Mosquitto