Working with Firewall Tunneling

Tunneling is not available for MS Windows Operating Systems.

Tunneling provides a means to establish a persistent connection between Zend Studio and a remote server situated behind a firewall or NAT. After a firewall tunnel is created, instead of assigning more communication ports for the Debug / Profile Sessions with the remote server, all communication between Zend Studio and the remote server proceeds through the tunnel.

Note for Windows users:

Tunneling does not work when Zend Server is installed on a Windows-based server. However, you can perform remote debugging to a machine behind a firewall as long as the correct ports are open on both ends.

The tunnel communication port should be used in the following circumstances:

When debugging or profiling files on a remote server which is behind a firewall or other security device.

Establishing communication between Zend Studio and Zend Server when Zend Server is running on a remote server which is behind a firewall or other security device. The communication between Zend Studio and Zend Server facilitates the integration of Zend Server event reporting capabilities with Zend Studio’s editing, debugging and profiling features, and makes it more effective.

To set up a tunneling connection, several configuration settings must be defined, both in Zend Studio and on your server's debugger. This can be done through Zend Server , Zend Platform, Zend Core or your php.ini file.

Setting-up Tunneling in Zend Server

The following procedure describes how to define allowed hosts for firewall tunneling. Users define allowed hosts for firewall tunneling to create a list of IP addresses (of computers that run Zend Studio) that connect to Zend Server for debugging purposes, in situations when a firewall stands between the machines.

Before setting-up tunneling, verify that the IP of the machine running Zend Studio is set as an allowed host in Setup | Debugger.

Note:

The following instructions define how to configure Zend Server's side for tunneling. Additional Zend Studio configurations are required to complete the process.

To define allowed hosts for firewall tunneling:

In the Administration Interface, go to Setup | Debugger.
In the "Allowed Zend Studio Clients for Debugging" section, enter a valid IP address or specify a range of IPs using Wildcards (*).
From the drop-down list, select an option according to the type of IP address you entered. Click 'Exact IP address only' for a single IP, or one of the other options to represent a range of hosts.
Click to add the host.
The changes are applied after clicking

The IP or range of IPs are now allowed to connect to the server through the firewall to debug PHP code with Zend Studio.

To remove a specific IP from the list, mark the check-box next to the IP and click Remove.

Make sure that you have not specified the IP in the "Denied Zend Studio Clients for Debugging" area.

Setting Up Tunneling in Zend Studio

In order to properly setup a tunnel connection to Zend Studio you have to configure Zend Studio to allow Zend Server to establish a connection.

Zend Studio 7 users should follow the instructions in: Setting Up Tunneling - External Link

Zend Studio for Eclipse 6 users should follow the instructions in:Setting Up Tunneling

Related Links:

Working with the Debugger