ngrok https commnication

[wepee]

Hi there,

I could not get ngrok to answer my question.
So, I may try my luck here.

Code: Select all

Forwarding                    https://12345678.ngrok.io -> http://localhost:81  

I have set up my ngrok URL above and it is working ok.
I can see on my firefox web browser has got a padlock symbol, indicating it is using TLS1.3 encryption.
But......
Does anyone knows whether ngrok provides end-to-end encryption tunnel? I just want to be sure.
That is communication from any of the geographical location in the world to ngrok server relays to your blueriris CCTV software running at home.

Or

It only provides encryption tunnel from any of the geographical location in the world to ngrok server.
The rest of the journey that is from ngrok server back to blueiris CCTV software will be in http.

Thank in advance.

Kind regards.

[wepee]

I think only the Pro + the Business plans which offer
end-to-end TLS encryption tunnel.

The Free registered + Basic plan does not provide this kind of feature.

2020-04-17_22-17-23.jpg (71.96 KiB) Viewed 12106 times

[Thixotropic]

For me it's

Anywhere----->(HTTPS connection)----->Ngrok tunnel URL--->-----(HTTPS connection)------>my BI box

So from wherever I am, I go to the nrok site, get the tunnel ID, and then use it to hit my BI box. It's a full HTTPS connection for me all the way as far as I know.

I've been happy with the ngrok service although due to current events I haven't had much of an opportunity to use it.

[wepee]

For me it's

Anywhere----->(HTTPS connection)----->Ngrok tunnel URL--->-----(HTTPS connection)------>my BI box

So from wherever I am, I go to the nrok site, get the tunnel ID, and then use it to hit my BI box. It's a full HTTPS connection for me all the way as far as I know.

I've been happy with the ngrok service although due to current events I haven't had much of an opportunity to use it.

Thanks for the feedback, I am still not convince that what you are saying the whole communication path
shown above is all encrypted. If you are right, and I am wrong, how to explain the price plan based
on the assumption that we both are using the Free registration account. Under the Free account,
there is no mention about End-To-End TLS encryption Tunnel, referring to the diagram that I attached
earlier in the post. Although, the Free account does have the option to select either in HTTP or HTTPS.
And of course, I choose to use HTTPS. In fact, I manage to configure ngrok to ONLY expose my BI
web server to communicate on HTTPS.

I am not a network expert, here......

But the only way to find out definitely that Free account provides End-to-End TLS encryption is to use
Wireshark to sniff out the packets which I have no plan to investigate and pursuing the matter further.
So I just let this matter hangs in the air, until ngrok support email can clear the email back logs and
answer my question regarding this matter.

[Thixotropic]

So I just let this matter hangs in the air, until ngrok support email can clear the email back logs and
answer my question regarding this matter.

I've been waiting 90 days or more so I wouldn't expect any response from them. I sent them 4 emails, never heard a word back from them.

[wepee]

So I just let this matter hangs in the air, until ngrok support email can clear the email back logs and
answer my question regarding this matter.

I've been waiting 90 days or more so I wouldn't expect any response from them. I sent them 4 emails, never heard a word back from them.

Hmmm......I wonder if I am a paid customer of ngrok, do I get a faster email response?

Just a discussion here, I have got nothing against ngrok, I reckon it is great product.
ngrok v2.0 has already superceded v1.0 but for whatever reason, the code was
not available in Github for scrutiny.

If want more people to use it as a paid service, c'mon at least get the act together
and start replying emails.