Zend Server User Guide > Tasks > Working with the Debugger > Working with Firewall Tunneling

Working with Firewall Tunneling

Important:

Tunneling is not available for MS Windows OS.

Tunneling provides a means to establish a persistent connection between Zend Studio and a remote server situated behind a firewall or NAT. After a firewall tunnel is created, instead of assigning more communication ports for the Debug / Profile Sessions with the remote server, all communication between Zend Studio and the remote server proceeds through the tunnel.

Note for Windows OS users:

Tunneling does not work when Zend Server for IBMi is installed on a Windows-based server. However, you can perform remote debugging to a machine behind a firewall as long as the correct ports are open on both ends.

The tunnel communication port should be used in the following circumstances:

When debugging or profiling files on a remote server which is behind a firewall or other security device.

Establishing communication between Zend Studio and Zend Server for IBMi when Zend Server for IBMi is running on a remote server which is behind a firewall or other security device. The communication between Zend Studio and Zend Server for IBMi facilitates the integration of Zend Server for IBMi event reporting capabilities with Zend Studio’s editing, debugging and profiling features, and makes it more effective.

To set up a tunneling connection, several configuration settings must be defined, both in Zend Studio and on your server's debugger. This can be done through Zend Server for IBMi , Zend Platform, Zend Core or your php.ini file.

Setting-up Tunneling in Zend Server for IBMi

The following procedure describes how to define allowed hosts for firewall tunneling. Users define allowed hosts for firewall tunneling to create a list of IP addresses (of computers that run Zend Studio) that connect to Zend Server for IBMi for debugging purposes, in situations when a firewall stands between the machines.

Before setting-up tunneling, verify that the IP of the machine running Zend Studio is set as an allowed host in the zend_debugger.allow_hosts directive. See Working with the Debugger for more information.

Note:

The following instructions define how to configure Zend Server for IBMi's side for tunneling. Additional Zend Studio configurations are required to complete the process.

To define allowed hosts for firewall tunneling:

In the UI, go to Configurations | Components.
Select the Zend Debugger from the Components list.
The Expanded view displays all the available component directives.
Locate the zend_debugger.allow_tunnel directive, and enter a valid IP address or specify a range of IPs using Wildcards (*).
Click
In the toolbar, the restart icon lights up , indicating a restart is needed to apply changes. Click to restart server and apply changes.
For information on restarting in Zend Server, see Server Restart.

The IP or range of IPs are now allowed to connect to the server through the firewall to debug PHP code with Zend Studio.