Proxy – for you / For nas – reverse

For me? Proxy.For nas? Reverse Proxy

https://www.avast.com/c-how-to-set-up-a-proxy

How to set up a proxy server on a Mac running macOS

 

Here's how to set up a proxy server on a Mac running macOS 10.15 Catalina. Other macOS versions use essentially the same commands.

  1. Open System Preferences. One way to get there is to click on the Apple menu > System Preferences.

  2. Choose the Network icon to adjust connectivity settings.

  3. Select the type of network you use, which is usually Ethernet or Wi-Fi.

  4. Click Advanced > Proxies.

    Here's how to set macOS's automatic proxy server settings.

  5. To automatically configure your proxy server settings, select Auto Proxy Discovery. Click on Secure Web Proxy (HTTPS). Type in the proxy server address and its port number in the fields on the right.

    Set macOS proxy server settings.

  6. To use a proxy auto-configuration (PAC) file, select Automatic Proxy Configuration and enter the proxy address into the URL field.

  7. If the proxy server is protected by a password, select the “Proxy server requires password” checkbox. Enter your account name and password in the Username and Password fields.

  8. Click OK to save the proxy setup.

You're now ready to surf the internet via your proxy.

How to set up a proxy in Google Chrome

 

By default, Chrome uses your macOS or Windows proxy. To change your proxy settings from within Chrome, take the following steps:

  1. Open the Chrome toolbar and select Settings.

  2. Scroll down to the bottom of the display. Click on Show advanced settings…

  3. Scroll down to “System” and choose Open your computer’s proxy settings.

     

  4. Next, go back to the instructions for your operating system listed above to set up your proxy server settings and follow them.

In short, to set up a proxy server in Google Chrome, you're just doing the first few steps in the browser, and then completing the process in your machine's operating system.

How to set up a proxy server in Safari

 

Like Chrome, Safari’s default setting is to follow the proxy configurations within your OS. Here’s how to change your proxy settings from within Safari:

  1. Click on Safari in the browser toolbar. Choose Preferences.

  2. Click on the Advanced tab. Under “Proxies,” click Change settings…

    Changing the proxy settings in Safari for macOS

  3. Next, you must go back to the instructions for macOS listed above to set up your proxy server settings and follow them.

How to set up a proxy server in Edge

 

Edge is Windows 10's built-in web browser, and unless you tell it otherwise, it’ll use your proxy configurations in Windows. The latest versions of Edge are based on Chrome, so the configuration is similar. The following steps show you how to set up a proxy from within Edge:

  1. In Microsoft Edge, at the top-right corner, click the Menu button. Select Settings.

  2. Scroll down to the Advanced settings section and click the View advanced settings icon.

  3. Click the Open proxy settings button.

    Set Edge proxy server settings.

  4. Next, go back to the instructions for Windows 10 listed above, then follow them to configure your proxy server settings.

How to set up a proxy server in Firefox

 

Unlike other web browsers, Firefox doesn't default to using your system's proxy settings. You’ll need to change your proxy from within Firefox:

  1. Open the Firefox menu and select Options.

  2. Click on the Advanced icon.

  3. Select the Network tab.

  4. In the Connection Settings, select, Auto-detect proxy configuration for this network. When prompted, enter the proxy address.

    Set Firefox proxy server settings

  5. Alternatively, in the Connection Settings, you can select, Use system proxy settings. If you choose that option, Firefox uses the proxy settings in your operating system.

  6. Click OK to save your settings.

How to set up a proxy server in Internet Explorer

 

Please keep in mind that Internet Explorer is an outdated web browser. Instead, switch to a browser that’s still receiving regular updates and support, such as Avast Secure Browser, Chrome, Edge, Firefox, or Safari. Though since quite a few people and companies still use Internet Explorer (IE), you should know how to set things up when necessary.

As with other browsers, IE defaults to using your Windows proxy configurations. Here’s how to set your proxy up from within IE.

  1. Open the IE toolbar and select Internet Options.

  2. Open the Connections tab.

  3. Select LAN Settings.

  4. Check the “Use a proxy server for your LAN” box.

    Configuring a proxy within the Local Area Network (LAN) Settings of Internet Explorer

  5. When prompted, enter the proxy server name and port number.

  6. Click OK to save your settings.

How to set up a proxy server in Android

 

With Android, you must configure proxy settings for each network you use. In addition, the proxy will only be used by your web browser. Other internet applications may choose to use or ignore the proxy based on their own internal settings. This is another reason why VPNs tend to be better choices — when you use one, it covers all the internet traffic from your device.

  1. Open Android’s Settings and tap Wi-Fi to view a list of Wi-Fi networks.

  2. Long-press the Wi-Fi network name for which you want to change the proxy settings. Tap Modify Network.

  3. Tap Advanced Options.

    Configuring proxy settings on Android

  4. Tap Manual to change your proxy's settings. Enter your hostname and proxy port.

    OR

    If you have a Proxy Auto-Config (PAC) file, select Proxy Auto-Config and Android will prompt you to enter the PAC address.

  5. Tap SAVE.

How to set up a proxy server in iOS

 

  1. Go to Settings > Wi-Fi.

  2. Select the active Wi-Fi connection.

  3. Under HTTP proxy, click Configure Proxy.

  4. Tap Manual to change your proxy's settings. Enter your host name, proxy port, and, if needed, your authentication username and password.

    Setting up a proxy on iOS

    OR

    If your provider supports Web Proxy Auto-Discovery Protocol (WPAD), tap Automatic. If required, enter the Proxy Auto-Config (PAC) file location.

  5. Tap back to the Wi-Fi selection window.

https://www.asustor.com/en/online/College_topic?topic=325

Reverse Proxy – NAS

Course Objectives:

After completing this course you will be able to:

  1. Use a reverse proxy domain to protect the secure connection of multiple NAS.
  2. Use a reverse proxy domain to improve the security of Apps' HTTPS connection.

 


 

1. Introducing Reverse Proxies

Web browsing is becoming more and more secure. Most apps on an ASUSTOR NAS use a web browser for functionality but don’t necessarily support HTTP Secure.
Reverse proxy servers help clients provide web information while protecting the security of transmitted data. Reverse proxy servers on an ASUSTOR NAS that has a valid HTTPS certificate protects data transmitted by an external HTTPS connection.
ADM 3.5.2 adds reverse proxies as a new feature. Reverse proxy servers are used to implement HTTPS connections on content or web apps that would not otherwise be protected. Set the domain name on the NAS where the reverse proxy server is to be enabled. And apply for a legal certificate, please refer to the setting method:
NAS 324: Using HTTPS to Secure NAS Communication

 

 

2. Protecting the Connections of Multiple NAS Devices

When you set up multiple NAS in the same local network and want to connect to the NAS using https securely from the outside, turn on ADM and use the reverse proxy server of one of the NAS to protect the secure connection of multiple NAS, It is not necessary to open all NAS to external network and apply for different domain names.

 

 

*2.1 Adding Proxy Domains*

To use the legal domain of this NAS to log in to the ADM of other NAS with HTTPS, proxy domains will need to be added first.

 

Step 1

  • Click Reverse Proxy in ADM Preferences.

img

 

Step 2

  • Click Add on the reverse proxy page.
  • Create a new proxy domain and click Next.

img

 

img

 

Step 3

  • Enter a name for easy identification of this proxy domain. Example: ASUSTOR NAS ADM
  • Select HTTPS and the server name.
  • Enter an unused communication port. Example: 8880
  • Select a network interface for use.
  • Enter the path of this proxy domain rule. Example: /as6602t
  • Enable port forwarding and press Next.

Note: If there is only one service in this proxy domain, the path can only keep "/". If you need to add other rules, you can use Edit to add a path for the first rule.

img

 

Step 4

  • Enter a name to easily identify domain rules.
  • Select HTTP and enter the LAN IP of the proxy domain. Example: [192.168.xxx.xxx].
  • Enter the port of the proxy domain. Example: 8000 (ADM HTTP login port).
  • Enter the path if the proxy domain has a specific path. ADM login does not require a specific path, a slash (/) is enough.
  • Click Test Connection to verify that the above information of the proxy domain is correct and if the URL needs a redirect path. Click Next.

img

 

Step 5

  • Confirm whether the information set is correct and click Finish.

img

  • Upon completion, you’ll be able to see the information of the proxy domain on the reverse proxy page.

img

 

Step 6

  • Enter your proxy domain into a web browser. The reverse proxy server will lead the connection to http://192.168.xxx.xxx:8000/.
  • Use the HTTPS URL of this proxy domain from outside to connect to another NAS and log in to ADM. Use the same MyASUSTOR domain name to log in to the original NAS or add the configured port and path to log in to another NAS to make this connection secure under HTTPS with a valid HTTPS certificate.
    Reverse proxy servers can be used to open ADM and log in to another NAS with HTTPS. After logging in, other services and apps will need to set their own reverse proxy ports in order to use needed services and apps correctly in a secure connection.

 

On Chrome:

img

 

On Firefox:

img

 

 

*2.2 Add Rules to Existing Proxy Domains*

Additional rules may be added to the existing proxy domain in order to use a different path to open another service. These instructions show how to add a reverse proxy rule to log in to the ADM of another NAS in the domain added in the previous chapter.

 

Step 1

  • Click Add on the Reverse Proxy page.
  • Click Add to add a rule to an existing proxy domain. Click Next.

img

 

img

 

Step 2

  • Select the proxy domain where you want to add a rule, for example: [https://yourddns.myasustor.com:8880].
  • Enter the path of this new rule, for example: /as5304t, click Next.

Note: Because this function is to add rules to the existing proxy domain, the domain name and port of the proxy domain cannot be changed during this process, but a different path must be entered.

img

 

Step 3

  • Enter a name to easily identify the domain rule for the reverse proxy. Example: AS5304T.
  • Select HTTP and enter the LAN IP of the proxy domain. Example: [192.168.xx.xx].
  • Enter the port of the proxy domain. Example: 8000 (ADM HTTP login port).
  • Enter the path if the proxy domain has a specific path. ADM login does not require a specific path, a slash (/) is enough.
  • Click Test Connection to test whether the above information of the proxy domain is successfully connected and whether its URL needs a redirect path. Click Next.

img

 

Step 4

  • Confirm whether the information set is correct and click Finish.

img

  • Upon completion, information of the proxy domain will be visible on the reverse proxy page.

img

 

Step 5

  • For example, inputting this proxy domain according to the image below will cause the reverse proxy [https://yourddns.myasustor.com:8880/as5304t/] to redirect the connection to [http:// 192.168.xx.xx:8000/].
  • Use the HTTPS URL of this proxy domain from outside to connect to another newly added NAS and log in to ADM.

 

On Chrome:

img

 

On Firefox:

img

 

 

3. Upgrading NAS App Security

Apps that are unable to use HTTPS in a NAS can use a reverse proxy server to enable remote HTTPS connections. This chapter will introduce several apps that require specific communication ports and cannot directly use the HTTPS certificate installed on the NAS.

 

*3.1 Setting Reverse Proxies to Work with Portainer*

HTTPS connection is enabled by default on Portainer CE 2.6.0 and above, users no longer need to set up a reverse proxy server for Portainer.

Portainer does not support HTTPS on a remote connection to the NAS. Even if the NAS has a valid HTTPS certificate, HTTPS will not be enabled when connecting from a remote location. Reverse proxy servers achieve connection security for Portainer.

Note: In this example, an existing proxy domain is used to add rules, and there is no need to set an additional port. Users can also use "Create new proxy domain" and add another port to set up a reverse proxy for Portainer.

 

Step 1

  • Click Add on the Reverse Proxy page.
  • Click Add to add a rule to an existing proxy domain. Click Next.

img

 

img

 

Step 2

  • Select the proxy domain where you want to add a rule, for example: [https://yourddns.myasustor.com:8880].
  • Enter the path of this new rule, for example: /portainer, click Next.

Note: Because this function is to add rules to the existing proxy domain, the domain name and port of the proxy domain cannot be changed during this process, but a different path must be entered.

img

 

Step 3

  • Enter a name for easy identification of this proxy domain. Example: Portainer HTTPS
  • Select HTTP and enter the LAN IP of the NAS. Example: [192.168.xx.xxx].
  • Enter the port of the proxy domain. Example: 19900 (Portainer HTTP port).
  • If an app of the proxy domain has a specific path, please enter it otherwise enter a slash (/).
  • Click Test Connection to test whether the above information of the proxy domain is successfully connected and whether its URL needs a redirect path. Click Next.

img

 

Step 4

  • Confirm whether the information set is correct and click Finish.

img

  • Upon completion, information of the proxy domain will be visible on the reverse proxy page.

img

 

Step 5

 

On Chrome:

img

 

On Firefox:

img

 

 

*3.2 Setting Nextcloud to Work with Reverse Proxies*

The Docker version of Nextcloud does not use the default web server of the NAS. A reverse proxy server needs to be configured in order support HTTPS remote connections. After the NAS has applied for a valid HTTPS certificate, you can now use the reverse proxy server to configure Nextcloud HTTPS connection.

 

Step 1

  • Click Add on the reverse proxy page.
  • Create a new proxy domain and click Next.

img

 

img

 

Step 2

  • Enter a name for easy identification of this proxy domain. Example: Nextcloud HTTPS
  • Select HTTPS and the server name. Example: [yourddns.myasustor.com].
  • Enter an unused port number. It must also be different from the original Nextcloud communication port. Example: 32681
  • Select a network interface. Select an asterisk for default.
  • Enter the path of this proxy domain rule, or leave a slash (/). Turn on port forwarding and click Next.

img

 

Step 3

  • Optional: Enter a name to easily identify the domain rule for the reverse proxy.
  • Select HTTP and enter the LAN IP of the NAS. Example: [192.168.xx.xx].
  • Enter the port of the proxy domain. Example: 32680 (Nextcloud HTTP port).
  • If an app of the proxy domain has a specific path, please enter it otherwise enter a slash (/).
  • Click Test Connection to test whether the above information of the proxy domain is successfully connected and whether its URL needs a redirect path. Click Next.

img

 

Step 4

  • Confirm whether the information set is correct and click Finish.

img

  • Upon completion, information of the proxy domain will be visible on the reverse proxy page.

img

 

Step 5

Nextcloud has strict restrictions on the domains it can access. The Nextcloud document explains that when setting up a reverse proxy server, you’ll need to add other settings to Nextcloud's config.php for normal use. For details, please refer to Nextcloud documentation.

  • Download /volume1/Docker/Nextcloud/config/config.php to your computer and open a text editor to edit it.
  • Add ['overwritehost' =>'yourddns.myasustor.com:32681',] and ['overwriteprotocol' =>'https',] below the content of the config.php file and archive.
  • Upload the edited config.php to the NAS folder [/volume1/Docker/Nextcloud/config] to overwrite the original file.

img

 

Step 6

  • Take this proxy domain as an example, enter [https://yourddns.myasustor.com:32681/] in the web browser, and the reverse proxy server will direct the connection to [http://192.168.xx.xxx:32680/] which is the Nextcloud local URL.
  • Use the HTTPS URL of this proxy domain from the outside to connect to Nextcloud installed on this NAS and log in.

 

On Chrome:

img

 

On Firefox:

img

 

 

*3.3 Set up the HTTPS connection of Plex Web*

With Plex Media Server installed on a NAS, directly use a web browser to open Plex to manage media libraries as well as play audio and video files. The HTTPS certificate bound to the NAS is for the NAS IP. The Dynamic DNS in an ASUSTOR NAS cannot be used to open Plex securely. Use reverse proxy server to open Plex using the DDNS with an HTTPS connection.

Before setting a reverse proxy domain, you’ll need to open Plex with HTTPS and log in to your Plex account. For Plex Media Server installation and media library settings, please refer to:
NAS 235: Introducing Plex Media Server

 

Step 1

  • On the ADM desktop, click Plex Media Server.
  • In the address bar of the browser, change the web page protocol of Plex Web to HTTPS. Example: https://192.168.xx.xxx:32400
  • Log in to your registered Plex account, and allow HTTPS connections from this IP.
  • Confirm that Plex can display media libraries and play content.

img

 

Step 2

  • Click Add on the reverse proxy page.
  • Create a new proxy domain and click Next.

img

 

img

 

Step 3

  • Enter a name for easy identification of this proxy domain. Example: Plex HTTPS
  • Select HTTPS and the server name. Example: [yourddns.myasustor.com].
  • Enter an unused port number. It must also be different from the original Plex communication port. Example: 32411
  • Select a network interface. Select an asterisk for default.
  • Enter the path of this proxy domain rule, or leave a slash (/). Turn on port forwarding and click Next.

img

 

Step 4

  • Optional: Enter a name to easily identify the domain rule for the reverse proxy.
  • Select HTTPS and enter the LAN IP of the NAS. Example: [192.168.xx.xx].
  • Enter the port of the proxy domain. Example: 32400 (Plex HTTP/HTTPS port).
  • If an app of the proxy domain has a specific path, please enter it, otherwise enter a slash (/).
  • Click Test Connection to test whether the above information of the proxy domain is successfully connected and whether its URL needs a redirect path. Click Next.

img

 

Step 5

  • Confirm whether the information set is correct and click Finish.

img

  • Upon completion, information of the proxy domain will be visible on the reverse proxy page.

img

 

Step 6

  • Take this proxy domain as an example, enter [https://yourddns.myasustor.com:32411/] in the web browser, and the reverse proxy server will direct the connection to [https://192.168.xx.xxx:32400/] which is the Plex Media Server local URL.
  • Use the HTTPS URL of this proxy domain from the outside to connect to Plex Media Server installed on this NAS and log in.

 

On Chrome:

img

 

On Firefox:

img

 

 

4. Editing Proxy Domains and Rules

 

*4.1 Editing or Removing Proxy Domains*

  • After selecting a proxy domain, click Edit to edit the name, network protocol, server name and/or port of the reverse proxy domain. After editing a proxy domain, all the rules in that proxy domain will be revised accordingly.
  • Click Remove to delete a proxy domain and the rules below.

img

 

img

 

 

*4.2 Edit or Remove Proxy Domain Rules*

  • On the Reverse Proxy page, click on a proxy domain to expand the rules of the proxy domain. After selecting a rule, click Edit to edit the network protocol of the reverse proxy domain on the proxy domain page. You can edit the name, network protocol, host name, port and path of the rule as well as enable or disable the proxy domain rules on this page.
  • Click Remove to delete this proxy domain rule, and deleting the last rule will remove its proxy domain.

img

 

  • If you need to temporarily disable a reverse proxy connection, you can disable the reverse proxy domain rule on the edit rules page instead of removing the temporarily disabled rule.

img

 

img