If your application establishes connections with the origin server over Transmission Control Protocol (TCP) or User Datagram Protocol (UDP), you can enable the TCP/UDP proxy feature to improve application performance and security. The most common TCP or UDP-based scenarios include real-time combat gaming and real-time interactive audio and video streaming.
Usage notes
TCP/UDP proxy is available only in Enterprise plans. You can upgrade to Enterprise and contact us for the feature.
If you set the edge port and origin server port to different port ranges, map the edge ports to the corresponding origin server ports and configure request forwarding rules. For example, if you set the edge port to 3000-4000 and the origin server port to 5000-6000, and configure port mapping, requests that are sent to port 3050 are forwarded to port 5050.
You can configure up to 30 proxy rules for an application.
For UDP-based applications, the Maximum Transmission Unit (MTU) of packets that ESA can forward is 1,300 bytes.
Procedure
In the left-side navigation pane, click Websites.
On the Websites page, find the website that you want to manage, and click the website name or View Details in the Actions column.
In the left-side navigation pane, choose
.Click Create Application and configure parameters based on your business requirements.
Access Configuration
Parameter
Description
Domain Name
The domain name or hostname that clients access. The system resolves the domain name to the IP address assigned by Edge Security Acceleration (ESA) for clients to access over the Layer 4 protocol.
Proxy Rules
Parameter
Description
Protocol
The protocol that your application uses at Layer 4. Valid values: TCP and UDP.
Edge Port
The port used by clients to access ESA. You can specify one or more ports or port ranges, or a combination of ports and port ranges.
Separate multiple ports with commas (,). Example:
80,81,82
.Use a hyphen (-) to specify a port range. Example:
100-200
.Example of a combination:
80,81,82,100-200
.Origin Server
The IP address or domain name of the origin server from which ESA pulls content. You can specify an IP address, domain name, or address of an origin pool or load balancer.
Origin Port
The port used by clients to access the origin server. You can specify a port or port range. If you specify a port range for Edge Port, you must specify a port range in the same length as that of Edge Port for Origin Port. If you do not specify a port range for Edge Port, you must specify a single port for Origin Port.
Pass Client IP
The proxy protocol over which the originating IP addresses and port information of clients are passed to the origin server. Valid values: Do Not Pass, PROXY Protocol v1, and PROXY Protocol v2. Default value: Do Not Pass.
Remarks
Optional. The custom description for the rule.
Click OK.
Feature availability
Feature | Entrance | Pro | Premium | Enterprise |
TCP/UDP proxy settings | No | No | No |