Working with Firewall Tunneling

bulb.gifTunneling is not available for MS Windows Operating Systems.

 

Tunneling provides a means to establish a persistent connection between Zend Studio and a remote server situated behind a firewall or NAT. After a firewall tunnel is created, instead of assigning more communication ports for the Debug / Profile Sessions with the remote server, all communication between Zend Studio and the remote server proceeds through the tunnel.

Note for Windows users:

Tunneling does not work when Zend Server for IBM i is installed on a Windows-based server. However, you can perform remote debugging to a machine behind a firewall as long as the correct ports are open on both ends.

The tunnel communication port should be used in the following circumstances:

  1. When debugging or profiling files on a remote server which is behind a firewall or other security device.

  1. Establishing communication between Zend Studio and Zend Server for IBM i when Zend Server for IBM i is running on a remote server which is behind a firewall or other security device. The communication between Zend Studio and Zend Server for IBM i facilitates the integration of Zend Server for IBM i event reporting capabilities with Zend Studio’s editing, debugging and profiling features, and makes it more effective.

To set up a tunneling connection, several configuration settings must be defined, both in Zend Studio and on your server's debugger. This can be done through Zend Server for IBM i , Zend Platform, Zend Core or your php.ini file.

Setting-up Tunneling in Zend Server for IBM i

The following procedure describes how to define allowed hosts for firewall tunneling. Users define allowed hosts for firewall tunneling to create a list of IP addresses (of computers that run Zend Studio) that connect to Zend Server for IBM i for debugging purposes, in situations when a firewall stands between the machines.

 

Before setting-up tunneling, verify that the IP of the machine running Zend Studio is set as an allowed host in Setup | Debugger.

Note:

The following instructions define how to configure Zend Server for IBM i's side for tunneling. Additional Zend Studio configurations are required to complete the process.

 

 

Instructions on how to complete a procedure

To define allowed hosts for firewall tunneling:

  1. In the Administration Interface, go to Setup | Debugger.

  2. In the "Allowed Zend Studio Clients for Debugging" section, enter a valid IP address or specify a range of IPs using Wildcards (*).

  3. From the drop-down list, select an option according to the type of IP address you entered. Click 'Exact IP address only' for a single IP, or one of the other options to represent a range of hosts.

  4. Click  add_pe.pngto add the host.

  5. The changes are applied after clicking   Restart Server

The IP or range of IPs are now allowed to connect to the server through the firewall to debug PHP code with Zend Studio.

To remove a specific IP from the list, mark the check-box next to the IP and click Remove.

Make sure that you have not specified the IP in the "Denied Zend Studio Clients for Debugging" area.

Setting Up Tunneling in Zend Studio

In order to properly setup a tunnel connection to Zend Studio you have to configure Zend Studio to allow Zend Server for IBM i to establish a connection.

Zend Studio 7 users should follow the instructions in: Setting Up Tunneling - External Link

Zend Studio for Eclipse 6 users should follow the instructions in:Setting Up Tunneling

 

 

Related Links

Related Links:

Working with the Debugger