Ngrok Tunnel with Devolutions Gateway

On this page

Devolutions Gateway can operate behind Ngrok to add an additional layer of protection to an internal Devolutions Gateway installation or to allow an outbound tunnel when changing a firewall configuration is unavailable. Using Devolutions Gateway behind Ngrok is available for both Devolutions Server and Devolutions Hub Business.

Configure Ngrok

A paid subscription to Ngrok is required as the gateway needs to serve TCP traffic. The subscription also includes the use of custom domain names.

  1. Log into the Ngrok dashboard.

  2. Go to the Domains section which is under Cloud Edge.

  3. Click New Domain.

  4. Input the domain details and click Continue.

  5. Under Cloud Edge, select the TCP Adresses section and then click the New TCP Address button.

  6. Modify the information if needed and click Continue.

    It is advised to take note of the Domain, TCP Address, assigned TCP port as well as the Ngrok Authtoken.

  7. Go to Getting Started — Your Authtoken and click the Copy button.

Retrieve the Devolutions Server or Devolutions Hub Business provisioning key

  1. Log into the Devolutions Server or Devolutions Hub Business instance as a user with access to the Devolutions Gateway configuration.
  2. Go to Administration — Devolutions Gateway.
  3. Click the More button and select Download public key.

This file needs to be accessible to the server hosting Devolutions Gateway behind Ngrok.

Install Devolutions Gateway with Ngrok

When using Ngrok with Devolutions Hub Business, the Devolutions Gateway Standalone web interface will be unavailable, therefore keep the Enable the Gateway web interface option unchecked. Devolutions Gateway Standalone requires a private provisioner key, which is not available with Devolutions Hub.

  1. Open a connection to the server hosting Devolutions Gateway and download the installer.

  2. Run the installer.

  3. Click Next.

  4. Once the desired installation path is selected, click the Next button.

  5. Check the Enable access over the internet using Ngrok option and click Next.

  6. Enter the Ngrok settings and click Next.

  7. Specify the path to the previously retrieved public key from Devolutions Server or Devolutions Hub Business.

    This key file must be accessible to the NetworkService account, which Devolutions Gateway runs as.

  8. Click Next and then click Install.

Configure Devolutions Server or Devolutions Hub Business

Devolutions Server

  1. Log into a Devolutions Server instance as a user with access to the Devolutions Gateway configuration.

  2. Go to Administration — Devolutions Gateway.

  3. Click the Add (+) button and choose Gateway.

  4. Enter the previously retrieved details from Ngrok used to configure Devolutions Gateway.

    It may be needed to preface the Ngrok domain with https://. Auto-Detect will not work but Test connection will indicate if the Ngrok Domain is accessible.

  5. Click Save.

  6. Click the ellipsis (More) button next to the newly configured gateway and select Publish revocation list.

    1. If the Publish Gateway configuration option is available, it should be done before Publish revocation list.

Devolutions Hub Business

  1. Log into a Devolutions Hub Business instance as a user with access to the Devolutions Gateway configuration.

  2. Go to Administration — Devolutions Gateway.

  3. Click the Add (+) button.

  4. Enter the previously retrieved details from Ngrok used to configure Devolutions Gateway.

    It may be needed to preface the Ngrok domain with https://. Auto-Detect will not work but Test connection will indicate if the Ngrok Domain is accessible.

  5. Go through any combination of Vaults, Groups or Users tabs to decide how the licenses will be distributed.

  6. Click Add.

  7. Click the ellipsis (More) button next to the newly configured gateway and select Publish Gateway configuration.

Devolutions Forum logo Give us Feedback