This document describes how to create and configure an L4 proxy instance.
Note:
The L4 proxy is only available with the Enterprise Edition package.
Directions
1. Log in to the Tencent Cloud EdgeOne console, enter Service Overview in the left menu bar, and click the site to be configured under Website Security Acceleration.
2. On the site details page, click L4 proxy > L4 proxy list.
3. On the page that appears, click Create L4 proxy instance.
4. Specify parameters on the Service Configurations page. The table below lists the parameters:
Item
Description
Instance name
1–50 characters ([a-z], [0-9] and [-]). It must start and end with a digit or letter. Consecutive hyphens (-) are not allowed. After creation, modifications are not allowed.
IPv6 access
If you enable this feature, EdgeOne nodes can be accessed over the IPv6 protocol.
Once created, the DDoS protection level for a layer-4 proxy instance cannot be modified, so please proceed with caution.
For mainland China region and global region, only Advanced or Ultimate protection is available.
For global region (excluding mainland China), Standard and Advanced protection levels are supported.
5. Click Create button. Confirm the cost details in the popup, then click I have read the cost statement and confirm creating the layer-4 proxy instance. For billing description, please refer to the Billing overview.
6. Specify the forwarding rules. On the L4 proxy page, select the newly created L4 proxy instance, click Configuration, enter the instance details page to configure forwarding rules. You can also import multiple forwarding rules at a time. For more information, see Batch Configuring Forwarding Rules. The table below lists the fields of a forwarding rule:
Note:
1. If you specify Origin group for Origin type, you can specify only self-owned origins. In this case, a COS bucket is not supported as the origin.
2. You can specify at most 2,000 forwarding rules for each L4 proxy instance.
Item
Description
Rule ID
Auto-generated, not supported for modification, unique identifier of the rule.
Forwarding protocol
Forwarding protocol of L4 proxy. Valid values: TCP and UDP.
Forwarding port
The supported port number ranges from 1 to 64999. You can enter multiple ports separated with semicolons (;) or use a hyphen to enter a port range.
The following ports are reserved for internal use, please do not use them:
For TCP forwarding protocol: 3943, 3944, 6088, 36000, 56000.
For UDP forwarding protocol: 4789, 4790, 6080, 61708.
Origin type and Origin address
Single origin: If you specify Single origin for Origin type, you can enter the IP address or domain name of a single origin.
Origin group: If you specify Origin group for Origin type, you can select an origin from an existing origin group, or create an origin group.
Origin port
You can enter a single port or a port range. If it is a port range, the forwarding port must also be a port range, and the length of the origin port and forwarding port ranges must be consistent.
For example: If the forwarding port range is 80-90, the origin port range can be 80-90 or 90-100.
Session persistence
As long as an origin server IP remains unchanged, traffic from the same client IP will always be forwarded to the same origin server IP.
Proxy Protocol V1 (recommended): Pass client IPs as plaintext by using the TCP header, which only supports TCP protocols. For more information, see Obtaining Real Client IPs Through Protocol V1/V2.
Proxy Protocol V2: Pass client IPs by using the header. V2 uses the binary format and supports both TCP and UDP protocols. The first packet of each TCP connection carries a PPv2 header, while only the first data packet carries the header for UDP.For more information, see Passing Real Client IP Through SPP.
Not passed: Real client IPs will not be transferred.
Rule Tag
Optional, you can enter 1-50 any characters to identify the forwarding rule.
7. Click Save to complete the configuration of the L4 proxy rules.
